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Users  Buoyed 
By  Monthly 
Patch  Releases 

Microsoft’s  approach 
makes  process  more 
predictable,  execs  say 

BY  JAIKUMAR  VIJAYAN 

Microsoft  Corp.’s  move  to  a 
monthly  patch-release  cycle 
one  year  ago  this  month  has 
made  it  easier  to  install  securi¬ 
ty  updates  for  Windows  and 
other  products,  IT  managers 
said  last  week  —  even  as  they 
were  greeted  with  a  barrage  of 
new  fixes,  many  for  flaws  that 
were  given  “critical”  severity 
ratings  by  Microsoft. 

The  October  patch  rollout 
was  one  of  Microsoft’s  largest 
this  year,  consisting  of  10 
patches  designed  to  address 
a  total  of  20  vulnerabilities 
across  a  wide  range  of  the 
company’s  products.  Seven  of 
the  security  updates  were  rat¬ 
ed  as  “critical”  for  users  to  in¬ 
stall,  and  the  other  three  were 
labeled  “important.” 


ADDITIONAL  COVERAGE 

For  more  stories  about  security 
technologies  and  issues,  visit  our 
Knowledge  Center  online: 

QuickLink  k1600 
www.computerworld.com 


Security  Updates 


The  “critical”  patches  released 
by  Microsoft  last  week  include: 

MS04-032:  Fixes  several  secu¬ 
rity  holes  in  Windows  NT,  XP  and 
Server  2003  that  could  allow  at¬ 
tackers  to  take  complete  control 
of  unprotected  systems  and  view, 
change  or  delete  data  on  com¬ 
promised  machines. 


MS04-033:  Patches  a  remote 
code  execution  vulnerability  in 
several  versions  of  Excel  for  Win¬ 
dows  and  Macintosh  systems. 


MS04-034:  Addresses  a  flaw  in 
the  way  that  Windows  XP  and 
Server  2003  process  com¬ 
pressed  files. 

The  massive  release  high¬ 
lighted  Microsoft’^  continuing 
struggles  with  software  secu¬ 
rity.  Nevertheless,  six  users 
said  the  monthly  cycle  that  the 
vendor  has  followed  for  al¬ 
most  all  the  patches  released 
since  last  October  has  made 
the  patching  process  more 
predictable  and  manageable. 

“Overall,  the  [monthly 
patching]  schedule  is  a  good 
thing,”  said  Hugh  McArthur, 
information  systems  security 
officer  at  Online  Resources 
Corp.,  an  online  bill-process¬ 
ing  company  in  McLean,  Va. 

“It  has  been  helpful  for  plan¬ 
ning  purposes  and  in  allowing 
us  to  evaluate  the  patches 
once  a  month,  versus  having 

Patches,  page  55 


IT  Scrambles  to  Meet 
Sarb-Ox  Controls  Deadline 


Slow  starts,  miscommunication  put  companies 
under  the  gun  on  technology-related  mandates 


BY  THOMAS  HOFFMAN 

IT  departments  at  many  large 
companies  are  racing  to  docu¬ 
ment,  remediate  and  test  IT- 
related  controls  to  meet 
a  year-end  reporting 
deadline  for  Sarbanes- 
Oxley  compliance. 

The  rush  is  on  be¬ 
cause  many  companies 
failed  to  grasp  the 
amount  of  work  that  would  be 
required  and  because  of  mis¬ 
communication  between  IT 
managers  and  the  finance  de- 
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Read  more 
Sarbanes-Oxley 
news  on  our 
Web  site: 

QuickLink 

Oa3250 


partments  that  typically  run 
Sarbanes-Oxley  Act  compli¬ 
ance  projects,  according  to 
users  and  analysts  who  were 
interviewed  last  week. 

“What  I’ve  seen  is  a 
‘Let’s  drop  everything 
and  get  this  done’  ap¬ 
proach  on  dealing  with 
IT  controls  from  the 
second  quarter  until 
now,”  said  John  Hagerty,  an 
analyst  at  AMR  Research  Inc. 
in  Boston. 

Hagerty  and  several  other 


analysts  and  consultants  said 
they  expect  that  most  compa¬ 
nies  that  need  to  show  Sarb- 
Ox  compliance  by  year’s  end 
will  get  the  bulk  of  their  IT 
controls  documented  and  test¬ 
ed  in  time.  But  some  analysts 
predicted  that  in  annual  10-K 
reports  early  next  year,  as 
many  as  25%  of  the  so-called 
accelerated  filers  will  have  to 
report  controls-related  excep¬ 
tions  that  require  additional 
remediation.  Depending  on 
the  severity  of  the  problems, 
companies  could  be  fined  by 
the  U.S.  Securities  and  Ex¬ 
change  Commission. 

Sarb-Ox,  page  16 
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Stretching 

Your  Storage 

Dollars 


Demand  for  data 
storage  is  far  out¬ 
pacing  the  growth 
of  IT  budgets,  so  something  has  to 
give.  This  special  report  identifies  cost-saving  strate¬ 
gies  to  help  you  cope.  Stories  begin  on  page  35. 


ONLINE 


Exclusive  results  from  Computerworld' s  storage  survey,  in 
downloadable  PowerPoint  slides.  ©  QuickLink  49486 
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Make  a  name  for  yourself 
with  Windows  Server  System. 
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Microsoft 


Microsoft  Windows  Server  System  makes 
golf  club  maker  PING  to  manage  the  infr 
saving  their  400  end  users.  Here's  how: 
Windows  Server  2003  with  Active  Direo 
now  centrally  manages  all  its  servers,  de 
and  end  users  from  one  location.  This  cl 
administrative  time  by  800  hours.  Time  the 
be  spent  developing  new  ways  to  support 
partners,  and  employees.  Software  that's 
manage  is  software  that  helps  you  do  mon 
Get  the  full  PING  story  at  microsoft.com/w 


Mr.  40%  Less 
Time  Spent  on 
Maintenance  and 
Administration 


Make  a  name  for  yourself 
with  Windows  Server  System 


PING 


Microsoft 


Windows 
Server  System 


The  right  storage  solution  doesn’t  just  give  you  better  storage  control. 

It  helps  you  make  better  business  decisions. 

Storage  Management  Solutions 

The  first  step  in  making  better  business  decisions?  Deciding  to  be  in  control.  CA's  Intelligent  Storage  Management  solutions  can 
put  you  in  control  of  costs,  resources  and  data  availability  like  never  before.  They  provide  you  with  a  comprehensive  real-time 
view  of  your  system's  storage  capabilities,  while  also  providing  immediate  access  to  all  of  your  information.  As  a  result,  you  can 
manage  and  monitor  your  entire  storage  environment  with  ease  and  actually  use  existing  data.  As  always,  it's  also  vendor-  and 
device-neutral,  so  you  can  maximize  your  current  storage  resources,  saving  time  and  money.  With  more  automated  software 
that  can  make  its  own  decisions  about  storage  management,  you'll  have  the  information  you  need  to  make  better  business 
decisions.  To  find  out  more  or  to  get  a  white  paper,  go  to  ca.com/driver. 
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E-vote  at  Risk 

In  the  Technology  section:  Despite  assurances 
from  election  officials  and  vendors,  researchers 
say  the  the  security  and  reliability  of  electronic 
voting  systems  is  in  doubt  because  of  substan¬ 
dard  development  and  testing  practices.  Page  25 


The  Extra  Mile 

In  the  Management  section: 

Rebuilding  your  bare-bones  IT  shop?  It’s 
a  great  time  to  commit  to  getting  diversity 
right.  Here  are  some  practical  tips  from 
companies  that  know  how.  Page  31 
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4  IBM’  S  new  storage  arrays 
offer  many  firsts,  including 
compatibility  between  arrays. 

4  Starbucks  customers  can 

now  use  HP  tablet  PCs  to 
burn  music  CDs  while  sipping 
their  coffee. 

5  IBM  and  Borland  add  tools 

that  bring  business  process 
automation  to  software 
development. 

8  India’s  IT  hiring  boom  contin¬ 
ues,  and  the  growing  demand 
for  offshore  services  could 
lead  to  rate  increases. 

10  IBM  completes  its  Power5 
lineup  by  adding  64-way 
pSeries  and  iSeries  models. 

12  The  L.A.  city  government’s 

second  rollout  of  PeopleSoft 
apps  is  proceeding  a  lot  more 
smoothly  than  the  first  one. 

12  PeopleSoft’s  management 

shuffle  continues  as  executive 
VP  Ram  Gupta  departs. 

16  Sanjay  Kumar  looks  for  start¬ 
ups  to  invest  in  after  his  exit 
from  Computer  Associates. 
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6  On  the  Mark:  Mark  Hall  has 

the  latest  on  Teradata’s  plans 
to  better  integrate  its  data 
warehouse  with  other  apps. 

20  Don  Tennant  is  still  waiting 
for  something  substantive  to 
come  out  of  the  accord  Sun 
and  Microsoft  signed  in  April. 

20  Michael  Gartenberg  has 

heard  it  all  before  when  it 
comes  to  scary  stories  about 
the  security  threats  posed  by 
USB  devices. 

21  Virginia  Robbins  loves  self- 
service,  but  automation  can 
do  only  so  much  before  it 
becomes  more  cost-effective 
to  have  humans  intervene. 

28  Robert  L.  Mitchell  thinks 
companies  are  missing  the 
point  if  they  dislike  how  quick¬ 
ly  information  (about  their 
products’  flaws,  for  example) 
is  disseminated  on  the  Web. 

34  Barbara  Gomolski  realizes 
that  IT  careers  have  lost  their 
allure  for  many,  but  if  you’ve 
got  a  budding  techie  at  home, 
she  has  some  advice. 

56  Frankly  Speaking:  Frank 

Hayes  says  that  while  you 
might  want  to  jam  wireless 
transmissions  in  your  offices, 
you  can’t  jam  the  future. 
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Stretching  Your 
Storage  Dollars 

Skyrocketing  demand  for 
data  storage  is  outpacing  the 
growth  of  IT  budgets,  and 
something  has  to  give.  This 
special  report  identifies 
cost-saving  strategies  to 
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PACKAGE  BEGINS 
ON  PAGE  35. 


36  Thrifty  Storage  Strategies.  To 

maximize  storage  savings,  some 
larger  companies  are  homing  in 
on  long-term  planning  initiatives. 


38  Long  Distance, 
Short  Money.  IT 

execs  like  Don 
Bolton  ofTeppco 
Partners  say  they’re 
cutting  their  long¬ 
distance  data  back¬ 
up  costs  with  stor- 
age-over-IP  tech¬ 
nology. 


40  Secondhand 
Savings.  Buying 
used  storage  equip¬ 


ment  is  cheaper 
than  buying  new, 
and  customers 
can  also  reap 
the  benefits  of 
faster  acquisition 
cycles  and  more 
flexible  mainte¬ 
nance  programs. 

But  there  are 
risks  involved. 

44  QuickStudy: 

A  primer  on  grid  storage,  a 
model  similar  to  grid  computing 
that  allows  companies  to  deploy 
and  manage  storage  distributed 
across  multiple  systems  and 
networks.  ONLINE:  Learn  more 
about  the  first  grid  storage  prod¬ 
uct.  ©QuickLink  49972 

45  The  Almanac. 

E-mail,  business 
intelligence  and 
CRM  are  driving 
forces  behind  the 
need  for  more 
storage  capacity;  e-mail  archiving 
has  hidden  costs;  and  a  prototype 
holographic  disc  is  emerging  from 
an  R&D  lab. 

46  Opinion:  Columnist 
Mark  Hall  was 
planning  to  write 
about  the  impend¬ 
ing  demise  of  tape. 

But  then  he  looked 
a  bit  closer  and  dis¬ 
covered  it  has  a  bright  future. 


Editor’s  Picks:  a 

collection  of  Comput¬ 
er-world.'?,  best  stories 
about  data  storage, 
including  regulatory 
compliance  issues. 

©  QuickLink  49977 
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Data  Points.  Our 

newest  collection 
has  storage  factoids 
to  download  for 
your  PowerPoint 
presentations. 
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Storage  Networking 
Worid  Highlights. 

News  and  survey  re¬ 
sults  from  Computer- 
world’s  tw  ice-annual 
storage  conference. 
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Cisco,  Microsoft 
Bridge  Security  Gap 

CISCO  SYSTEMS  INC.  and 
MICROSOFT  CORP.  today  will  an¬ 
nounce  a  collaborative  effort  de¬ 
signed  to  bridge  a  divide  between 
their  emerging  network  access-con¬ 
trol  architectures. 

The  two  companies  said  on  Friday 
that  they  have  agreed  to  share  appli¬ 
cation  programming  interfaces  and 
jointly  develop  protocols  intended  to 
improve  interoperability  between  Mi¬ 
crosoft’s  Network  Access  Protection 
technology  and  Cisco’s  rival  Network 
Admission  Control  offering. 

NAP  and  NAC  are  designed  to 
help  companies  enforce  security 
policies  on  network  endpoint  sys¬ 
tems  such  as  PCs  and  mobile  de¬ 
vices.  The  technologies  let  IT  man¬ 
agers  set  rules  that  prevent  a  client 
device  from  accessing  a  network  un¬ 
less  it  complies  with  policies  on  anti¬ 
virus  software  updates,  firewall  con¬ 
figurations  and  other  issues. 

But  Cisco’s  plan  is  to  integrate 
the  functionality  into  its  routers, 
switches  and  virtual  private  network 
devices,  while  Microsoft’s  strategy  is 
focused  on  embedding  NAP  in  its 
operating  systems. 

The  agreement  to  collaborate 
means  that  users  shouldn’t  have  to 
worry  about  interoperability  issues, 
said  Joel  Conover,  an  analyst  at  Cur¬ 
rent  Analysis  Inc.  in  Sterling,  Va.  “Mi¬ 
crosoft  and  Cisco  needed  to  do  this," 
he  said.  “A  lack  of  cooperation  would 
have  resulted  in  competing  standards 
or  rio  standards  at  all,  both  of  which 
are  unattractive  to  enterprises.” 

Cisco  released  an  initial  set  of  NAC 
products  in  June  [QuickLink  47781], 
Microsoft  will  add  VPN  Quarantine 
support  in  the  first  service  pack  for 
Windows  Server  2003,  due  by  mid- 
2005.  But  Steve  Anderson,  director 
of  networking  in  Microsoft’s  Windows 
Server  group,  said  full  NAP  support 
won't  come  until  the  Longhorn  ver¬ 
sion  of  Windows,  expected  in  2007. 

Microsoft  had  planned  to  fully  sup¬ 
port  NAP  in  an  update  to  Windows 
Server  2003  that's  due  in  the  sec¬ 
ond  half  of  2005  Anderson  said  the 
delay  is  being  caused  by  the  deal 
with  Cisco  and  a  decision  by  Micro¬ 
soft  to  add  IPsec  enforcement  in  ad¬ 
dition  to  Dynamic  Host  Configuration 
Protocol  enforcement. 

-  Jaikumar  Vijayan  and  Carol  SI iwa 
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IBM  Adds  High-End, 
Midrange  Disk  Arrays 


Performance,  capacity  boosted  in  first 
storage  systems  based  on  IBM  chips 


BY  LUCAS  MEARIAN 

NEW  YORK 

bm  last  week  unveiled 
two  new  enterprise-class 
disk  arrays.  One  is  aimed 
at  the  high  end  and  one  at 
midrange  environments,  but 
both  have  compatible  software 
that  allows  the  boxes  to  be 
managed  through  a  single  in¬ 
terface  and  data  to  be  replicat¬ 
ed  between  them. 

The  TotalStorage  DS8000, 
the  next  generation  of  IBM’s 
high-end  Enterprise  Storage 
Server,  also  known  as  the 
Shark,  boosts  performance  as 
much  as  sixfold,  and  the 
192TB  capacity  is  more  than 
three  times  that  of  its  prede¬ 
cessor.  The  midrange  Total- 
Storage  DS6000  array  is  a 
rack-mountable,  3U-high  unit 
that  scales  from  580GB  to 
67.2TB.  (1U  is  1.75-in.  high.) 

Both  boxes  represent  the 
first  time  IBM  has  used  native 
Fibre  Channel  disk  drives  in¬ 
stead  of  SCSI  with  Fibre 
Channel  bridges.  Charles  Lick- 
el,  vice  president  of  software 
and  storage  development  at 
IBM,  said  the  arrays  will  be  of¬ 
fered  with  less-expensive  Ad¬ 
vanced  Technology  Attach¬ 
ment  disks  by  the  end  of  2005. 


The  arrays  will  ship  Dec.  3. 
The  DS8000  and  DS6000  can 
be  used  as  primary  storage  for 
IBM  zSeries  and  iSeries  main¬ 
frames  as  well  as  for  Unix, 
Linux  and  Wintel  servers.  The 
DS8000  can  be  upgraded  on 
the  fly  from  two  to  four  proc¬ 
essors. 

For  the  first  time,  IBM  used 
its  own  server  processors  for 
storage.  The  refrigerator-size 
DS8000  uses  the  pSeries 
processor,  and  the  DS6000 
uses  an  IBM  PowerPC  chip. 

Compatibility  a  Plus 

Users  at  a  press  event  here 
said  they  were  impressed  by 
the  increase  in  performance 
and  the  ability  to  use  a  single 
management  platform  across 
all  of  IBM’s  storage  products. 

“It’s  easy  to  talk  about  the 
new  stuff,  but  when  you’ve  got 
an  existing  infrastructure, 
you’ve  got  to  have  something 
that  blends  into  that,”  said  Bob 
Venable,  manager  of  enter¬ 
prise  systems  at  BlueCross 
BlueShield  of  Tennessee  Inc. 
in  Chattanooga.  The  users  also 
said  they  looked  forward  to  an 
upgrade  that,  as  with  a  main¬ 
frame,  will  allow  multiple  logi¬ 
cal  partitions  to  be  created  au- 


IBM  Storage  Arrays 


IBM  DS8000  m! 

■  Retail  starting  price:  $134,000 

■  2566B  of  cache 

■  Supports  96  petabytes  of  external 
storage 

■  128  Fibre  Channel  or  Ficon  ports 

■  In  2005,  will  be  expandable  from 
two  to  eight  processors  and  5126B 
of  cache 

0S6000  (PICTURED  ABOVE) 

■  Retail  starting  price:  $97,000 

■  Configured  through  Web-based 
interfaces 

■  4GB  of  cache 

■  16  Fibre  Channel  or  Ficon  ports 

tomatically  in  response  to  ap¬ 
plication  needs.  IBM  pledged 
to  add  that  capability  over  the 
next  year. 

Currently  the  DS8000  can 
be  manually  split  into  two  sep¬ 
arate  systems. 

Tony  Asaro,  an  analyst  at 


Enterprise  Strategy  Group  Inc. 
in  Milford,  Mass.,  gave  the 
new  IBM  disk  arrays  high 
marks  for  their  price,  compati¬ 
bility,  four-year  warranty  and 
use  of  IBM-built  processors. 
But  he  added  that  IBM  must 
still  address  the  network- 
attached  storage  and  content- 
addressed  storage  markets, 
like  chief  competitors  EMC 
Corp.  and  Hitachi  Data  Sys¬ 
tems  Corp.  have. 

Both  arrays  use  an  internal¬ 
ly  switched  architecture  in¬ 
stead  of  Fibre  Channel  arbi¬ 
trated  loop,  which  brings  IBM 
up  to  speed  with  similar  boxes 
from  its  major  competitors. 

Dale  Collier,  senior  vice 
president  of  technology  at  Re¬ 
gions  Financial  Corp.  in  Mont¬ 
gomery,  Ala.,  said  he  likes  the 
compatibility  between  the 
DS8000  and  DS6000.  He’s 
considering  buying  both  to 
replicate  between  a  data  cen¬ 
ter  in  Montgomery  and  a  sec¬ 
ondary  one  in  Birmingham, 
Ala.  Regions’  infrastructure 
includes  IBM  mainframes  and 
Shark  arrays  and  EMC’s  high- 
end  Symmetrix  arrays. 

“Today,  we’re  dealing  with 
SunGard  for  disaster  recovery, 
and  at  best  that’s  a  24-hour 
[recovery  time  objective],” 
Collier  said.  By  replicating  the 
DS8000  and  DS6000  between 
data  centers,  he  could  recover 
data  in  seconds,  he  said. 

John  Dick,  CIO  at  Regions 
Financial,  said  he  likes  the 
new  arrays  but  added  that  the 
technology  also  offers  him  a 
chance  to  get  older-model 
Shark  arrays  at  a  cut-rate 
price.  ©  50078 
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Starbucks  Taps  HP  for 
Music  Download  Service 


STARBUCKS  CORP.  last  week  said 
it  will  use  hardware  and  software 
from  Hewlett-Packard  Co.  to  serve 
up  a  vast  digital  library  of  songs  to 
customers  along  with  its  coffee. 

Starbucks  customers  will  be 
able  to  use  tablet  PCs  supplied  by 
HP  to  listen  to  songs,  download 


them  and  burn  them  onto  CDs. 

A  nationwide  launch  of  the  new 
setup,  which  Starbucks  is  calling  its 
Hear  Music  “media  bar,”  is  sched¬ 
uled  to  begin  today  at  15  outlets  in 
Seattle  and  will  expand  to  30  coffee 
shops  in  the  Austin  area  starting  next 
Monday. 


«•  Starbucks  is  installing  HP  tablet  PCs,  workstations  and  printers  to  support 
its  new  in-store  music-download  and  CD-burning  service. 


www.computerworld.com 
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Vendors  Upgrade  Development  Tools 


IBM,  Borland  aim  to  bring  business 
process  automation  to  app  design  work 


BY  HEATHER  HAVENSTEIN 

IBM  and  Borland  Software 
Corp.  last  week  separately 
brought  out  upgrades  to  their 
development  tool  lines  that 
executives  said  add  support 
for  heterogeneous  environ¬ 
ments  and  more  closely  link 
software  creation  to  business 
goals. 

IBM  unveiled  an  expanded 
Rational  Software  product  line 
that  it  had  previewed  under 
the  code  name  Atlantic  at  the 
annual  Rational  user  group 
conference  last  summer 
[QuickLink  48365],  Mean¬ 
while,  Borland  rolled  out  a 
new  version  of  its  long-run¬ 
ning  Delphi  Windows  devel¬ 
opment  tool  family.  Observers 
said  both  companies  are  ma¬ 
neuvering  to  infuse  their  plat¬ 
forms  with  business  process 
automation  commonly  used  in 
other  corporate  operations 
such  as  core  product  design 
and  manufacturing. 

“What  we’re  seeing  today  in 
IT  shops  is  the  need  to  [start] 
thinking  more  strategically 
about  IT  priorities  and  how 
the  overall  IT  assets  and  re¬ 
sources  can  be  best  matched 
to  deliver  business  value,”  said 
Melissa  Webster,  an  analyst  at 
market  research  company 
IDC. 

IBM’s  release  of  the  Ratio- 


Starbucks  has  made  the  HP 
Tablet  PC  TC1100  systems  more 
durable  by  adding  an  aluminum 
frame  and  stronger  cables  for  the 
headsets,  said  James  Snook,  vice 
president  of  technology  strategy 
and  innovation  at  the  Seattle- 
based  company.  He  added  that 
touch-screen  technology  elimi¬ 
nates  the  need  for  a  keyboard. 

“We  found  a  way  to  comple¬ 
ment  the  existing  store  environ¬ 
ment  without  changing  it  to  a  sig¬ 
nificant  extent,”  Snook  said.  Using 
a  custom  application  on  the  tablet 


New  Products  and 
Enhancements 

IBM  RATIONAL 


■  All  Rational  development  tools 
will  be  based  on  the  Eclipse  3.0 
development  framework. 

■  New  products  include  Portfolio 
Manager,  Software  Architect  and 
Software  Modeler. 

■  New  features  in  the  tools  are 
designed  to  support  both  Java 
and  .Net  developers, 

BORLAND  DELPHI  2005 


■  Supports  Win32,  .Net  and  Cl 

*  Integrates  with  Borland  applica¬ 
tion  life-cycle  management  tools 
designed  to  simplify  code  man¬ 
agement  and  support  developer 
team  collaboration. 


nal  tool  set  brings  all  the  offer¬ 
ings  into  the  Eclipse  3.0  frame¬ 
work,  an  open-source  devel¬ 
opment  platform  that  promis¬ 
es  deeper  integration  of  the 
various  products,  Webster 
said.  Eclipse  replaces  propri¬ 
etary  application  program¬ 
ming  interfaces  previously 
used  to  integrate  the  Rational 
tools. 

The  Rational  tools  lineup 
includes  Portfolio  Manager, 


Software  Architect,  Software 
Modeler  and  Manual  Tester. 

The  modeling  tool  includes 
support  for  Unified  Modeling 
Language  2.0  for  visual-based 
modeling.  IBM  will  continue 
supporting  the  older  Rational 
Rose  and  Rational  XDE  mod¬ 
eling  systems. 

IBM  will  acquire  the  port¬ 
folio  management  software 
through  its  planned  purchase 
of  Systemcorp  ALG  Ltd.  (see 
story,  below  right). 

Diamondback  Strikes 

Meanwhile,  Borland  this  week 
unveiled  Delphi  2005,  which 
incorporates  support  for  .Net 
Win32,  Delphi  and  C#  in  one 
environment  while  integrating 
with  Borland  application  life- 
cycle  management  tools. 

Code-named  Diamondback, 
Delphi  2005  supports  Bor¬ 
land’s  Software  Delivery  Opti¬ 
mization  plan  to  apply  busi¬ 
ness  process  automation  to 
software  development  tools, 
the  company  said. 

Delphi  2005  also  provides 
an  alternative  to  the  end-to- 
end  development  platforms 
from  IBM  and  Microsoft 
Corp.,  said  Gartner  Inc.  ana¬ 
lyst  Mark  Driver.  Many  IT 
managers  with  systems  from 
both  Microsoft  and  IBM  con¬ 
tend  that  recurring  features  in 
multivendor  tools  complicate 
development  projects,  he  said. 

“Borland  is  one  of  the  very 
few  pure  tools  vendors  of  any 
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PCs,  customers  sitting  at  a  music 
bar  or  in  nearby  chairs  will  be  able 
to  view  a  directory  and  hear  selec¬ 
tions  from  an  in-store  database  of 
more  than  150,000  songs. 

An  HP  xw4100  workstation  will 
store  the  songs  and  support  the 
creation  of  professional-quality 
music  CDs,  while  an  HP  Business 
InkJet  9670  printer  will  allow  cus¬ 
tomers  to  produce  personalized 
CD  covers,  inserts,  graphics  and 
packaging,  said  Marc  Kriz,  HP’s 
worldwide  alliance  manager  for 
Starbucks. 


Starbucks  plans  to  charge 
$8.99  for  the  first  seven  songs  and 
99  cents  for  each  additional  one. 
Credit  card  data  for  processing 
payments  will  be  sent  from  the 
tablet  PCs  to  the  company’s  point- 
of-sale  system  via  in-store  Wi-Fi 
networks. 

HP  and  Starbucks  wouldn't  dis¬ 
close  the  expected  cost  of  the 
technology  deployment. 

Snook  said  the  rollout  will  take 
years  to  complete  but  wasn't  more 
specific. 

-Matt  Hamblen 


serious  size  left  in  the  indus¬ 
try,  [and]  they  have  to  play 
both  sides  of  the  fence,” 
Driver  said. 

Omar  Sayed,  CEO  of  Suc¬ 
ceed  Corp.  in  Chandler,  Ariz., 
has  used  Delphi  to  build 
e-commerce  systems  for  his 
customers  to  store  data  and 
operate  online  auctions.  The 
new  features  —  especially 
support  for  Win32,  .Net  and 
C#  in  one  environment  —  will 
give  company  developers 
“more  scope  to  what  they  can 
do  without  having  to  go  out¬ 
side  and  bridge  things  in  dif¬ 
ferent  environments,”  he  said. 


Delphi  2005  is  slated  to  ship 
next  month.  The  Architect 
Edition  is  priced  at  $3,000  for 
new  users  and  $1,999  for  an 
upgrade,  while  the  Enterprise 
Edition  lists  at  $2,500  for  new 
users  and  $1,500  for  an  up¬ 
grade.  The  Professional  Edi¬ 
tion  is  priced  at  $999  for  new 
users  and  $399  for  an  upgrade. 

All  of  the  new  IBM  products 
will  be  available  by  year’s  end. 
Pricing  ranges  from  $5,500  per 
user  for  Rational  Software  Ar¬ 
chitect  to  $1,000  per  user  for 
the  IBM  Rational  Web  Devel¬ 
oper  for  WebSphere.  ©  50105 

MORE  ONLINE 

For  more  on  this  topic,  visit  our 
Development  Knowledge  Center: 

O  QuickLink  a3110 
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IBM  to  Buy  Systemcorp 
To  Bolster  Rational  Line 


IBM  last  week  agreed  to  ac¬ 
quire  Systemcorp  ALG  Ltd., 
a  Montreal-based  project  port¬ 
folio  management  company, 
as  part  of  a  strategy  of  pushing 
business  process-driven  soft¬ 
ware  development. 

IBM  plans  to  fold  System- 
corp’s  Web-based  PMOffice 
software  into  its  Rational  de¬ 
velopment  platform  as  Ra¬ 
tional  Portfolio  Manager.  The 
portfolio  manager  tool  can 
provide  a  comprehensive  view 
of  IT  projects  across  the  enter¬ 
prise,  tracking  all  project  deliv¬ 
erables,  such  as  budgets  and 
tasks,  until  the  work  is  com¬ 
pleted,  IBM  said. 

Financial  terms  of  the  deal 
weren’t  disclosed. 

Systemcorp’s  software  can 
provide  Rational  users  the  visi¬ 
bility  needed  to  more  effective¬ 
ly  manage  IT  investments,  said 
Roger  Oberg,  IBM's  vice  presi¬ 
dent  of  marketing  for  Rational 
products. 

“Software  development  isn’t 
a  discrete  set  of  activities  done 
by  testers  and  developers  and 
architects  in  isolation,  but  is  a 
business  process . . .  that 
lends  itself  to  automation  and 


integration,”  Oberg  said.  “All 
of  the  software  development 
investment  decisions  take 
place  in  the  broader  context 
of  an  IT  portfolio  management 
decision.” 

The  Systemcorp  technolo¬ 
gy,  built  using  IBM’s  Web¬ 
Sphere  Portal,  was  designed 
to  complement  IBM  middle¬ 
ware,  Oberg  added. 

The  tool  can  help  CIOs  ef¬ 
fectively  communicate  how  IT 
resources  are  deployed  to  re¬ 
spond  to  overarching  business 
priorities,  said  Melissa  Web¬ 
ster,  an  analyst  at  market  re¬ 
search  company  IDC.  Because 
the  tool  tracks  costs  and  other 
expenses  against  project  mile¬ 
stones,  it  can  link  developer 
teams  to  the  business  goals, 
she  added. 

“A  few  years  ago,  those  dis¬ 
cussions  were  held  on  a  rather 
technical  level,"  Webster  said. 
“It  was  hard  for  the  lines-of- 
business  people  to  gain  some 
visibility  as  to  what  the  issues 
were  when  the  business  priori¬ 
ties  change ...  or  when  proj¬ 
ects  were  delayed,  why  they 
were  delayed.” 

-  Heather  Havenstein 
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Novell  Will  Defend 
Open-Source 

Novell  Inc.  said  it’s  prepared  to 
use  its  patent  portfolio  to  protect 
its  open-source  software  against 
lawsuits.  The  company  vowed  to 
employ  “the  same  measures  gen¬ 
erally  used  to  defend  proprietary 
software  products”  if  other  ven¬ 
dors  claim  that  its  open-source 
offerings  infringe  on  their  patents. 
Novell  didn’t  promise  that  it  would 
never  use  its  patents  against  oth¬ 
er  Linux  vendors  but  said  that  it 
has  no  intention  of  doing  so. 


SCO  to  State  Case 
On  New  Web  Site 

The  SCO  Group  Inc.  said  it  plans 
on  Nov.  1  to  launch  a  Web  site  de¬ 
voted  to  its  legal  battles  with  Nov¬ 
ell  and  other  Linux  backers.  The 
www.prosco.net  site  will  let  SCO 
“tell  our  side  of  the  story,”  CEO 
Dari  McBride  said  at  the  ETRE 
conference  in  Cannes,  France.  A 
spokesman  for  Lindon,  Utah-based 
SCO  said  the  site  is  being  created 
partly  in  response  to  www.groklaw. 
net,  an  independent  Web  site  that 
has  been  critical  of  SCO. 


Cisco  inks  Security 
Deals  With  CA,  IBM 

Computer  Associates  Internation¬ 
al  Inc.  said  it  plans  to  integrate  its 
antivirus  and  antispyware  tools 
with  Cisco  Systems  Inc.’s  Trust 
Agent  software.  Trust  Agent, 
which  is  part  of  Cisco’s  Network 
Admission  Control  offering,  works 
with  NAC-enabled  routers  to  stop 
unsecured  PCs  from  accessing 
networks.  Separately,  Cisco  and 
IBM  said  that  IBM’s  Tivoli  man¬ 
agement  software  now  interoper¬ 
ates  with  the  NAC  products. 
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Short  lakes 

WAL-MART  STORES  INC.  said  it 
has  expanded  its  data  warehouse, 
which  is  based  on  NCR  Corp.’s 
Teradata  software.  But  it  didn’t 
disclose  any  details.  (See  related 
items  at  right.) . . .  SAP  A8  up¬ 
graded  its  business  applications 
for  small  and  midsize  companies. 


E  ONTHEMARK 


HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 

NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 
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Orange  Everywhere  in 
October?  Must  Be . . . 


. . .  Halloween?  Or  maybe  the  Syracuse  University  Orange¬ 
men  football  team  had  arrived  in  Seattle  to  battle  the 
University  of  Washington  Huskies?  Neither.  The 
Washington  State  Convention  and  Trade  Center  was 
mobbed  last  week  by  3,000  database  and  business 


intelligence 
(BI)  wizards 
festooned 
with  orange 
vests,  hats, 
shirts  and 
even  shoes. 
Many  also 
carried  or¬ 
ange  travel 
bags,  back¬ 
packs  and 
briefcases  —  not  necessarily 
to  display  their  questionable 
fashion  sense,  but  to  show 
their  colors  while  attending 
Teradata’s  annual  user  con¬ 
ference.  The  San  Diego-based 
data  warehousing  division  of 
NCR  Corp.  has  adopted  or¬ 
ange  as  its  corporate  color.  In 
addition  to  doing  brisk  busi¬ 
ness  in  orange  clothing  and 
tchotchkes,  the  company  gave 
users  a  sneak  peek  at  Terada¬ 
ta  Warehouse  8.0,  a  software 
upgrade  that’s  due  in  early 
December.  According  to  Alan 
Chow,  Teradata’s  senior  vice 
president  for  R&D,  the  new 
release  will  conform  to  Web 
services  and  message-passing 
architectures,  linking  it  more 
tightly  with  business  applica¬ 


tions.  Perhaps  more  impor¬ 
tant,  he  says,  8.0  makes  it  eas¬ 
ier  to  trigger  external  stored 
procedures  so  other  applica¬ 
tions  can  automatically  react 
to  BI  discovered  inside  a  Ter¬ 
adata  data  warehouse.  Chow 
also  brags  that  8.0  improves 
the  responsiveness  of  data 
warehouses  to  real-time  rates. 

Near  real-time  analytics 
helped  boost . . . 

. . .  Continental  Airlines  Inc. 
from  worst  to  first.  That’s  the 
opinion  of  Kelly  Cook,  direc¬ 
tor  of  customer  relationship 
management  at  the  Houston- 
based  airline.  Cook  claims 
that  BI  that  Continental 
gleaned  from  its  customers 
helped  move  it  from  last 
place  in  travelers’  opinions 
nine  years  ago  to  the  winner 
of  this  year’s  award  for  best 
airline  from  London-based 
OAG  Worldwide  Ltd.  The 
first  move  Continental  made 
to  improve  frequent-flier  re¬ 
lations  back  in  the  mid-’90s 
was  to  consolidate  55  databas¬ 
es  worldwide  into  a  single 
Teradata  data  warehouse. 

“We  wanted  one  voice  of  the 


customer,”  Cook  says.  Next, 
the  goal  was  to  identify  high- 
yield  customers,  create  loyal¬ 
ty  programs  and  get  more  im¬ 
mediate  data  on  the  cost  of 
each  flight.  For  example, 
flight  attendants  now  receive 
information  from  the  data 
warehouse  about  high-value 
customers  on  a  flight  so 
they  can  personally  express 
the  airline’s  interest  in  and 
knowledge  about  the  cus¬ 
tomers’  recent  flying  experi¬ 
ences  with  Continental.  And 
the  company’s  financial  ana¬ 
lysts  can  get  information 
about  the  profitability  of  each 
flight  instantly  after  “wheels 
up,”  Cook  says.  She  adds  that 
in  the  future,  she  wants  the 
data  warehouse  to  use  real¬ 
time  clickstream  data  to  auto¬ 
matically  generate  targeted 
offers  to  Continental’s  Web 
site  visitors. 

Data  warehouse 
cuts  costs  for . . . 

. . .  cost-conscious  Southwest 
Airlines  Co.  The  Dallas-based 
carrier  centralized  its  BI 
group  two  years  ago  around  a 
Teradata  data  warehouse  in 
order  to  keep  a  lid  on  IT  costs 
through  better  systems  man¬ 
agement  and  more  efficient 
staffing  policies.  “We’re  the 
low-cost  airline,  so  we  should 
have  a  low-cost  infrastruc¬ 
ture,”  says  Patrick  Bolin,  se¬ 
nior  manager  of  enterprise 
data  warehousing  at  South¬ 
west.  Besides  helping  to  hold 
down  IT  spending,  the  2TB 
data  warehouse  helps  busi¬ 
ness  analysts  cut  corporate 
costs.  Bolin  pegs  the  annual 
savings  from  ideas  generated 
through  use  of  the  data  ware¬ 
house  at  between  $1.2  million 
and  $1.4  mil¬ 
lion.  As  a  re¬ 
sult  of  that 
success,  the 
data  ware¬ 
house  is  des¬ 
tined  to  grow. 
Bolin  esti¬ 
mates  that  it 
will  increase 


CHOW:  Tera¬ 
data  improves 
responsiveness 
to  real  time. 


to  3TB  by  next  summer  and 
possibly  double  that  volume 
by  2007.  He  says  his  team  is 
developing  better  ways  of 
handling  ad  hoc  query  re¬ 
quests  from  end  users  and 
creating  dashboard-style  tools 
for  the  airline’s  executives. 

‘Extreme  data 
warehousing’  is . . . 

. . .  just  around  the  corner,  pre¬ 
dicts  Stephen  Brobst,  Tera¬ 
data’s  chief  technology  offi¬ 
cer.  The  “extreme”  future  that 
Brobst  envisions  for  data 
warehouse  managers  has 
three  drivers:  vast  increases 
in  data  volume,  demand  for 
real-time  re¬ 
sponsiveness 
and  hordes  of 
new  users. 
Brobst  points 
to  potential 
petabytes  of 
data  created 
by  RFID  technology.  Compa¬ 
nies  that  use  RFID  had  better 
be  prepared  to  harvest  data  at 
rates  “two  orders  of  magni¬ 
tude  greater”  than  they’re 
used  to  getting,  he  says.  Data 
warehouse  performance  will 
also  be  critical  for  BI  apps, 
according  to  Brobst.  A  data 
warehouse  that  can’t  index 
new  information  “instanta¬ 
neously  or  near  instanta¬ 
neously”  is  going  to  be  all  but 
useless  in  the  coming  years, 
Brobst  claims.  He  adds  that 
CEOs  who  want  their  compa¬ 
nies  to  become  responsive 
“real-time  organizations”  are 
foolish  if  they  leave  out  BI.  “A 
real-time  enterprise  without 
real-time  business  intelli¬ 
gence  is  a  real  fast,  dumb  or¬ 
ganization,”  he  quips.  Finally, 
Brobst  estimates  that  the 
number  of  BI  users  of  a  typi¬ 
cal  data  warehouse  will  leap 
by  a  factor  of  10  in  the  next 
few  years.  Just  to  make  sure  it 
could  handle  the  load,  Tera¬ 
data  last  year  increased  the 
number  of  users  who  can  ac¬ 
cess  its  data  warehouse  by  a 
factor  of  more  than  100,000. 
That  should  do  it.  ©  50060 


4.2B 

Potential  users 
of  a  single 
Teradata  data 
warehouse 


e  companies  using 


Companies  adopting  HP  Integrity  servers,  powered  by  industry-leading  Intel®  Itanium®  2  Processors,  are  seeing  remarkable  gains  in  performance, 
The  momentum  is  building.  One  after  another,  companies  are  choosing  HP  Integrity  servers.  Leading  software  and  technology  partners  such  as 
BEA,  Microsoft,®  Oracle,  SAP  and  Siebel  Systems  have  embraced  the  platform  as  an  industry  standard.  And  with  the  ability  to  manage  a  mixed 
environment  of  UNIX,  Microsoft"  Windows®  Linux  and  OpenVMS,  HP  Integrity  servers  are  fast  becoming  the  ultimate  consolidation  tool.  Demand 
maximum  performance,  reliability  and  cost-efficiency  now,  on  a  platform  that  will  carry  you  forward  into  the  future.  Demand  performance  that's 
real-world  proven,  and  get  it— with  HP  Integrity  server  solutions. 


Choosing  HP  Integrity  servers,  choosing  results. 


AIRBUS  UK: 

Running  HP-UXlli  on  HP  Integrity 
servers,  20-30  wing  design 
simulations  that  used  to  take 
weeks  are  now  done  overnight. 


COMPUSA: 

Going  with  64-bit  architecture 
using  HP  Integrity  servers, 
they  cut  access  time  to  inventory 
data  by  up  to  85%. 


FIAT  AUTO: 

Standardizing  on  64-bit 
infrastructure  using  HP  Integrity 
servers,  they're  integrating  and 
enhancing  sales  and  service  as 
well  as  streamlining  the  buying 
process  while  lowering  sales  cost. 


THE  KOEHLER  GROUP: 

Moving  to  an  environment 
composed  of  HP  Integrity  servers, 
they  gained  a  50%  improvement 
in  mission-critical  performance. 


invent 


To  get  the  IDC  white  paper  outlining  the  performance  of  HP 
Integrity  servers  with  Intel®  Itanium®  2  Processors, 

CALL 

1-800-282-6672 

option  5,  mention  code  AQHF 

CLICK 

hp.com/go/demandintegrity5 

Intel,  Intel  Inside,  the  Intel  Inside  Logo  and  Itanium  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  Microsoft  and  Windows  are  either  registered  trademarks  or  trademarks  of  Microsoft  Corporation 
©2004  Hewlett-Packard  Development  Company,  L.P, 
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Offshoring  Fuels  IT 
Hiring  Boom  in  India 


Cost  of  services 
could  increase  as 
demand,  wages  rise 

BY  PATRICK  THIBODEAU 

IN  quarterly  financial- 
results  reports  released 
last  week,  offshore  out¬ 
sourcing  firms  in  India 
detailed  sharp  increases  in 
employee  head  count.  But 
analysts  said  the  growing  de¬ 
mand  for  offshore  services 
and  workers  is  increasing 
wages  in  India,  raising  the 
potential  of  rate  increases  for 
U.S.  customers. 

For  now,  at  least,  competi¬ 
tion  in  India  is  keeping  billing 
rates  stable.  But  several  ana¬ 
lysts  predicted  that  the  cur¬ 
rent  situation  won’t  continue 
indefinitely  because  competi¬ 
tion  for  experienced  employ¬ 
ees  will  increase. 

During  the  quarter  that  end¬ 
ed  Sept.  30,  Infosys  Technolo¬ 
gies  Ltd.’s  workforce  grew 
from  27,939  to  32,949  —  an  18% 
increase  in  just  three  months. 
At  the  end  of  last  year’s  third 
quarter,  Bangalore-based  In¬ 
fosys  had  18,580  employees. 

Mumbai-based  Tata  Con¬ 
sultancy  Services  Ltd.  said  its 
head  count  climbed  nearly 
12%  in  this  year’s  third  quarter, 
from  36,636  to  40,948.  In  June 
2003,  Tata  employed  about 
24,000  people. 

“Bangalore  today  is  like 
Silicon  Valley  was  five  years 
ago,”  said  Lance  Travis,  an  an¬ 
alyst  at  Boston-based  AMR 
Research  Inc. 


Correction 

A  STORY  ABOUT  e-mail  security 
appliances  that  ran  in  last  week’s 
News  section  (“Vendors  Add 
Weapons  to  Battle  E-mail  Virus¬ 
es")  incorrectly  listed  the  amount 
of  venture  capital  funding  raised 
by  Avinti  Inc.  The  Lindon,  Utah- 
based  company  has  raised  about 
S3  million  in  financing  thus  far. 


The  growth  in  overseas  IT 
employment  stems  from  rising 
demand  for  offshore  services 
from  U.S.  companies,  accord¬ 
ing  to  Meta  Group  Inc.  Meta 
estimates  that  offshore  spend¬ 
ing  by  U.S.  businesses  will 
reach  $10  billion  this  year  and 
that  the  use  of  offshore  ser¬ 
vices  will  grow  about  20% 
annually  through  2008.  And 
that’s  with  more  than  half  of 
all  companies  not  yet  using 
any  offshore  services,  said 
Meta  analyst  Dane  Anderson 
(see  chart). 

Offshore  demand  is  expect¬ 
ed  to  drive  up  salaries  in  India 
by  about  14%  this  year,  espe¬ 
cially  for  experienced  work¬ 
ers,  said  Eugene  Kublanov,  an 
analyst  at  outsourcing  consult¬ 
ing  firm  NeoIT  Inc.  in  San  Ra¬ 


mon,  Calif.  The  increases  are 
likely  to  continue  at  a  similar 
pace,  Kublanov  added.  An  ex¬ 
perienced  Indian  programmer 
making  $7,400  this  year  can 
expect  to  earn  about  $8,500  in 
2005,  he  said,  noting  that  the 
same  employee  may  be  mak¬ 
ing  twice  that  amount  by  2010. 

To  cover  such  increases,  off¬ 
shore  vendors  will  have  to  be¬ 
come  more  efficient  and  add 
more-sophisticated  IT  ser¬ 
vices  so  they  can  charge  high¬ 
er  prices.  Kublanov  said  that 
although  application  develop¬ 
ment  rates  in  India  remain 
roughly  one-third  of  what  they 
are  in  the  U.S.,  the  costs  there 
are  creeping  to  $19  to  $20  per 
hour  this  year,  compared  with 
$17  to  $18  in  2003. 

Competition  for  employees, 


Offshoring  Usage 


Meta  Group’s  breakdown  of 
offshore  outsourcing  usage  by 
U.S.  companies,  based  on  an 
analysis  of  its  client  base: 


55%:  Don't 
send  IT  work 
offshore 


33%:  Send 
about  5%  of 
their  IT  work 
offshore 


4%:  Rely  on 
offshore  firms 
for  up  to  half  of 
their  IT  work 


8%:  Have 
sent  10%  to 
30%  of  their 
work  offshore 


as  well  as  the  threat  of  in¬ 
creasing  turnover,  is  prompt¬ 
ing  some  companies  to  try  dif¬ 
ferent  approaches  to  recruit¬ 


ing  and  retaining  workers. 

At  its  offshore  outsourcing 
facility  in  Hyderabad,  Sierra 
Atlantic  Inc.  has  begun  hold¬ 
ing  “parents  day”  gatherings 
for  recent  college  graduates 
who  are  considering  job  of¬ 
fers.  The  Fremont,  Calif.- 
based  company  hopes  that 
winning  over  the  parents  of 
potential  new  hires  will  in¬ 
crease  the  likelihood  that  its 
job  offers  will  be  accepted. 

“The  majority  of  college 
graduates  have  arranged  mar¬ 
riages  still,”  said  Marc  Hebert, 
a  vice  president  at  Sierra  At¬ 
lantic.  “The  parents  are  very 
involved  in  these  kids’  lives.” 

Hebert  said  that  in  Hydera¬ 
bad,  where  Sierra  Atlantic  has 
a  700-employee  facility,  annu¬ 
al  turnover  has  reached  about 
15%,  putting  it  on  par  with  oth¬ 
er  large  cities  in  India.  The  ac¬ 
celerating  demand  for  workers 
is  prompting  Sierra  Atlantic  to 
consider  setting  up  operations 
in  other  regions  of  India,  as 
well  as  in  countries  such  as 
China,  he  said.  ©  50111 


BMC  Integrates  Tools  for  IT,  Business  Management 


BY  MATT  HAMBLEN 

BMC  Software  Inc.  last  week 
announced  plans  to  integrate  a 
variety  of  its  systems  manage¬ 
ment  tools  with  a  product  that 
lets  users  track  how  IT  prob¬ 
lems  affect  individual  business 
processes. 

Houston-based  BMC  said  an 
upgrade  of  its  Service  Impact 
Manager  software  will  include 
links  to  products  such  as  the 
company’s  mainframe  and 
DB2  database  management 
tools  and  its  Remedy  help 
desk  and  asset  management 
tools.  Service  Impact  Manager 
5.0,  which  is  due  in  December, 
will  also  include  a  built-in 
configuration  management 
database  and  other  new  fea¬ 
tures  (see  box). 

The  upgrade  is  aimed  at 
broadening  BMC’s  Business 
Service  Management  (BSM) 
offering,  which  is  designed  to 
give  IT  managers  a  set  of  tools 
for  linking  computing  re¬ 
sources  to  business  priorities. 

Peter  Armstrong,  director 
of  corporate  strategy  at  BMC, 
said  that  in  addition  to  the  in¬ 


ternal  product  integration  ca¬ 
pabilities,  the  BSM  software 
can  interoperate  with  rival 
management  tools  such  as 
Hewlett-Packard  Co.’s  Open- 
View  and  Computer  Associ¬ 
ates  International  Inc.’s  Uni¬ 
center.  Users  who  install  Ser¬ 
vice  Impact  Manager  “don’t 
have  to  rip  out  their  existing 
products,”  Armstrong  said. 


OTHER  FEATURES 

Service  Impact 
Manager  5.0 

A  Web-based  software  por¬ 
tal  that  provides  system  status 
information  and  customizable 
dashboard  views 

Reporting  tools  based  on 
technology  from  Business 
Objects  SA 

A  graphical  tool  that  lets 
multiple  users  jointly  develop 
business  service  models 

b  Integration  with  an  IT  asset 
discovery  tool  that  shows  the 
relationships  between  sys¬ 
tems  and  applications 


Joe  Furmanski,  technology 
project  director  at  the  Univer¬ 
sity  of  Pittsburgh  Medical 
Center,  said  he’s  testing  Ser¬ 
vice  Impact  Manager  5.0  for 
use  in  monitoring  the  center’s 
E-Health  system,  which  is 
used  to  order  medications, 
manage  surgeries  and  provide 
patient  information  to  doctors 
and  other  employees. 

The  E-Health  system  is 
based  on  applications  devel¬ 
oped  by  Kansas  City,  Mo.- 
based  Cerner  Corp.  and  is 
being  rolled  out  at  20  medical 
facilities  in  western  Pennsyl¬ 
vania  as  part  of  a  10-year, 

$130  million  project. 

Service  Impact  Manager  is 
expected  to  help  IT  staffers 
keep  the  system  running 
around  the  clock  and  provide 
information  to  business  man¬ 
agers  when  technical  problems 
do  occur,  Furmanski  said. 

The  medical  center  chose 
BMC  over  other  vendors  pri¬ 
marily  because  of  an  existing 
software  integration  partner¬ 
ship  between  BMC  and  Cern¬ 
er,  Furmanski  said,  adding  that 


he  expects  to  fully  integrate 
Service  Impact  Manager  with 
the  E-Health  system  within 
three  months. 

The  new  capabilities  in  Ser¬ 
vice  Impact  Manager  5.0  will 
“make  BMC’s  products  more 
manageable  in  smaller  bites,” 
said  Dennis  Gaughan,  an  ana¬ 
lyst  at  AMR  Research  Inc.  in 
Boston.  “BMC  is  trying  to 
make  the  BSM  concept  not 
seem  so  daunting.” 

Tim  Grieser,  an  analyst  at 
IDC,  agreed  that  the  added 
ties  between  Service  Impact 
Manager  and  other  tools  will 
be  a  big  deal  to  IT  managers. 
BMC  “has  discovered  that 
IT  does  not  want  a  rip-and- 
replace  approach  to  products 
supporting  the  business  im¬ 
pact  of  IT,”  Grieser  said. 

CA,  HP  and  IBM’s  Tivoli 
Software  unit  have  launched 
technology  initiatives  similar 
to  BSM,  but  Grieser  said  BMC 
has  moved  more  quickly  to 
flesh  out  its  offering  than  its 
competitors  have.  “BSM  is  a 
real  thing  and  not  a  marketing 
position,”  he  said.  ©  50096 
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Intel  Shelves  Plans 
For  4-GHz  Pentium 

Intel  Corp.  said  it  no  longer  plans 
to  release  a  4-GHz  version  of  its 
Pentium  4  processor,  having  de¬ 
cided  instead  to  realign  its  engi¬ 
neers  around  new  priorities  such 
as  the  development  of  multicore 
chips.  The  4-GHz  Pentium  4  orig¬ 
inally  was  due  by  year’s  end  but 
had  been  delayed  until  the  first 
quarter  of  2005.  Intel  said  it  will 
now  also  focus  more  on  steps 
such  as  expanding  the  cache 
memory  built  into  the  processors. 


Sun  Reports  Q1 
Loss  on  Charges . . . 

Sun  Microsystems  Inc.  reported 
a  loss  for  its  first  quarter,  which 
ended  Sept.  26.  Sun  said  it  would 
have  had  a  $13  million  profit  if  not 
for  investment  losses  and  restruc¬ 
turing  and  legal  charges.  Revenue 
was  up  4%  year  over  year  but  fell 
short  of  analysts’  expectations. 


SUN  BY  THE  NUMBERS 

REVENUE 

PROFIT 

Q1FY05 

S2.63B 

(S174M) 

Q1 FY04 

S2.54B 

(S286M) 

. . .  And  Ships  JDS 
Suite  for  Solaris 

Sun  has  released  a  version  of  its 
Java  Desktop  System  software 
for  the  Solaris  x86  operating  sys¬ 
tem.  The  new  release,  which  sup¬ 
ports  Sun’s  Opteron-based  work¬ 
stations,  is  the  first  version  of  the 
desktop  software  suite  to  run  on 
Solaris  instead  of  SUSE  Linux. 
But  some  of  the  features  that  are 
in  the  Linux  version  aren’t  avail¬ 
able  in  the  first  Solaris  release. 


Short  Takes 

MICROSOFT  CORP.  today  plans  to 
release  an  upgrade  of  its  Navision 
business  applications  that’s  more 
tightly  integrated  with  products 
such  as  Excel  and  SQL  Server. 

. .  ORACLE  CORP.  urged  users  to 
apply  database  patches  it  issued 
in  August,  saying  exploit  code 
has  been  posted  for  some  of 
the  flaws. 


IBM  Adds  64-Way  pSeries,  iSeries 


Targets  server  consolidation  as  PowerS 
achieves  high-end  performance  levels 


BY  PATRICK  THIBODEAU 

IBM  last  week  completed 
its  lineup  of  servers 
based  on  its  Power5  chips 
by  adding  high-end 
pSeries  and  iSeries  models 
that  can  support  up  to  64 
processors,  double  the  previ¬ 
ous  threshold  for  CPUs. 

The  systems  are  priced  from 
$451,000  for  an  eight-way  sys¬ 
tem  to  $4  million  for  a  system 
with  64  processors,  IBM  said. 

The  eServer  p5-590  and  p5- 
595  systems  can  run  either  Lin¬ 
ux  or  IBM’s  ATX  version  of 
Unix.  IBM  said  that  when  a 
server  is  equipped  with  AIX 
5.3,  its  processors  can  be  split 
into  as  many  as  10  partitions 
that  can  each  run  a  copy  of  the 
operating  system  and  handle 
different  applications. 

Dan  Olds,  an  analyst  at 
Gabriel  Consulting  Group  Inc. 
in  Beaverton,  Ore.,  said  the 
key  advantage  of  the  p5  sys¬ 
tems  for  large  IT  shops  is  their 
virtualization  management  ca¬ 
pabilities.  “Now  you’re  talking 
about  a  large  Unix  server  that 
is  a  heck  of  a  lot  more  useful 
than  they  used  to  be,”  he  said. 

IBM’s  eServer  15-595  system, 
the  newest  member  of  the 
iSeries  line  that  was  formerly 
known  as  the  AS/400,  runs  the 
i5  operating  system  that’s  com¬ 
patible  with  OS/400  releases 
dating  back  to  1999.  The  i5  also 
runs  AIX,  Windows  and  Linux. 

Better  App  Management 

An  early  i5  adopter,  Beverly 
Russell,  IT  director  at  E.D. 
Smith  &  Sons  Ltd.,  a  food 
products  manufacturer  in 
Winona,  Ontario,  is  using  a 
two-processor  system  to  run 
compute-intensive  business 
intelligence  applications.  Rus¬ 
sell  noted  that  the  system’s 
virtualization  capabilities  can 
manage  application  resources 
at  the  microprocessor  level. 

In  one  instance,  the  i5  shift¬ 
ed  computing  resources  from 
one  partition  to  another  but 
carefully  managed  the  reallo¬ 


cation,  “never  taking  it  down 
to  the  minimum  where  the 
performance  will  be  impact¬ 
ed,”  Russell  said.  The  Power5 
processors  also  boost  applica¬ 
tion  performance,  she  said. 

Clay  Ryder,  an  analyst  at 
The  Sageza  Group  Inc.  in 
Union  City,  Calif.,  said  boost¬ 
ing  the  iSeries  capacity  to  64 
processors  creates  “an  awful 
lot  of  horsepower”  for  a  sys¬ 
tem  that  has  long  been  aimed 
at  midsize  companies.  “It’s 
kind  of  hard  to  not  think  about 
it  as  a  kind  of  a  miniframe,” 
said  Ryder,  who  sees  the  i5 
systems  being  adopted  for 
server  consolidations. 


Power5  Systems 


»  IBM  completed  its 
Power5  lineup  in  its  pSeries 
and  iSeries  systems.  There 
are  a  number  of  configurations. 

■  IBM  will  continue  to  sell 
its  Power4  chip  through 
2005.  The  company  says  cus¬ 
tomers  are  still  rolling  out  these 
systems. 

■  The  pSeries  and  iSeries 
can  be  sold  with  on-demand 
capabilities.  Customers  can 
have  the  processors  on  hand 
and  turn  them  on  -  and  pay  for 
them  -  when  needed. 

m  The  systems  will  ship 
Nov.  19. 


Business  Objects  Takes 
Next  Step  on  Bl  Integration 


BY  HEATHER  HAVENSTEIN 

Business  Objects  SA  last  week 
began  shipping  a  beta  version 
of  a  business  intelligence  soft¬ 
ware  upgrade  that  expands  the 
ties  between  its  data  analysis 
tools  and  the  reporting  tech¬ 
nology  that  the  company  ac¬ 
quired  when  it  bought  Crystal 
Decisions  Inc. 

The  new  release,  called 
BusinessObjects  11,  will  knit 
together  query  and  analysis, 
reporting,  business  scorecard- 
ing  and  executive  dashboard 

tools,  plus  underly- _ 

ing  data  integra¬ 
tion  technology,  on 
a  single  software 
platform.  Lance 
Walter,  vice  presi¬ 
dent  of  product 
marketing  at  Business  Objects 
in  San  Jose,  said  general  avail¬ 
ability  is  expected  by  the  end 
of  the  year. 

In  June,  Business  Objects 
began  shipping  an  upgrade 
that  provided  front-end  inte¬ 
gration  between  its  software 
and  the  reporting  tools  devel¬ 
oped  by  Crystal  Decisions, 
which  it  acquired  late  last 
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year.  The  front-end  links  in¬ 
clude  a  unified  software  portal 
and  common  Web  services  ap¬ 
plication  programming  inter¬ 
faces,  said  Walter,  who  added 
that  they  let  users  move  seam¬ 
lessly  between  Crystal-gener¬ 
ated  reports  and  analytical  ap¬ 
plications  built  around  Busi¬ 
ness  Objects’  tools. 

The  back-end  connections 
included  in  BusinessObjects  11 
will  provide  a  unified  infra¬ 
structure  for  integrating  data 
and  managing  metadata,  said 

_  IDC  analyst  Dan 

Vesset.  The  ability 
to  manage  the  vari¬ 
ous  business  intelli¬ 
gence  tools  as  a  sin¬ 
gle  platform  could 
-  "  -  help  users  lower  IT 

costs,  he  said.  “At  the  end  of 
the  day,  you  have  one  Bl  suite 
that  addresses  the  needs  of  a 
broad  range  of  users,”  he  noted. 

Emergency  Medical  Associ¬ 
ates,  a  Livingston,  N.J.-based 
emergency-room  staffing 
company,  uses  Business 
Objects’  Application  Founda¬ 
tion  framework  to  deliver 
electronic  patient  records 


Jean  Bozman,  an  analyst  at 
IDC,  said  IBM  is  bringing  out 
the  systems  at  a  time  when  IT 
managers  are  once  again  start¬ 
ing  to  buy  high-end  systems. 
Interest  in  low-cost  servers 
isn’t  waning  at  all,  Bozman 
said.  But  she  added  that  many 
companies  are  interested  in 
improving  server  utilization 
by  consolidating  applications 
onto  larger  machines. 

IBM  officials  said  the  new 
systems  are  three  times  faster 
than  their  predecessors  in  the 
Regatta  line,  and  they  cost 
40%  less  than  the  Regatta 
products.  It  also  maintained 
that  the  new  systems  offer 
better  pricing  and  perfor¬ 
mance  than  rival  products  do, 
but  analysts  said  that’s  a  race 
that  never  ends.  ©  50109 


that  are  stored  in  a  data  ware¬ 
house  to  end-user  dashboards. 
EMA,  which  added  Crystal’s 
reporting  tools  to  its  business 
intelligence  infrastructure 
before  the  acquisition,  has 
signed  on  to  beta-test  Busi¬ 
nessObjects  11. 

Jonathan  Rothman,  EMA’s 
director  of  data  management, 
said  he  currently  has  to  use 
data  extraction,  transforma¬ 
tion  and  loading  tools  to  move 
operational  data  into  the  data 
warehouse  and  connect  it  to 
the  company’s  Business  Ob¬ 
jects  applications.  With  Busi¬ 
nessObjects  11,  he  said,  “I’ll  be 
able  to  take  the  Crystal  re¬ 
ports  themselves  and  just  put 
them  into  Application  Foun¬ 
dation  and  have  those  point  to 
the  operational  data  source.” 

The  beta  release  keeps  Busi¬ 
ness  Objects  on  target  to  meet 
the  road  map  it  laid  out  in  Jan¬ 
uary  for  integrating  the  two 
product  lines,  said  Mike  Schiff, 
an  analyst  at  Current  Analysis 
Inc.  in  Sterling,  Va. 

Next  year,  Business  Objects 
plans  to  complete  the  integra¬ 
tion  process  by  releasing  Busi¬ 
nessObjects  12,  a  new  suite 
that  company  officials  said 
will  expand  the  functionality 
of  all  its  current  products. 

©  50112 
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L.A.  Finds  PeopleSoft  Better 
The  Second  Time  Around 


City  applies  lessons  learned  from  a 
disastrous  past  supply  chain  project 


BY  MARC  L.  SONGINI 

LOS  ANGELES 

he  second  major 
rollout  of  PeopleSoft 
Inc.  software  by  the 
city  government 
here  is  proving  far  less  trou¬ 
blesome  than  the  first  People- 
Soft  rollout  four  years  ago, 
when  an  implementation  was 
bogged  down  with  internal  re¬ 
sistance  and  inadequate  train¬ 
ing,  among  other  problems. 

This  time,  said  city  officials, 
end  users  have  been  convinced 
that  the  supply  chain  software 
coming  in  will  make  life  better 
for  them.  Installation  of  Peo- 
pleSoft’s  Enterprise  8.8  e-pro¬ 
curement  and  strategic  suppli¬ 
er  software  is  slated  to  be  com¬ 
pleted  in  February.  The  new 
version  promises  significant 
changes  for  users,  since  the 


city  government  will  be  able  to 
handle  supplier  transactions 
directly  over  the  Internet. 

“Change  is  a  lot  easier  when 
people  trust  that  you  are  not 
doing  anything  that  will  hurt 
them,”  said  Robert  Jensen,  as¬ 
sistant  general  manager  in  the 
Los  Angeles  municipal  gov¬ 
ernment’s  Department  of  Gen¬ 
eral  Services.  Jensen  and 
members  of  his  staff  spoke 
with  Computerworld  last  week 
to  detail  the  implementation 
and  describe  how  officials 
avoided  the  problems  caused 
by  the  2001  installation. 

Jensen  said  his  department, 
the  project  sponsor,  learned  the 
hard  way  that  it  makes  a  differ¬ 
ence  when  users  “know  that 
you  are  looking  out  for  them 
and  trying  to  make  their  work 
easier  and  more  manageable.” 


Even  the  tone  is  different 
this  time  around:  Meetings 
held  with  department  heads 
are  now  “well  received,”  he 
said.  It  was  quite  different  a 
few  years  ago,  when  a  number 
of  users  were  hostile  to  an 
$11  million  PeopleSoft  supply 
chain  management  software 


L.A.  LEARNED  to  get  user  buy-in 
for  its  second  PeopleSoft  projecl 


implementation  [QuickLink 
20455]  that  changed  the  au¬ 
thority  and  responsibilities  of 
many  city  workers.  “We  all 
shared  the  pain,”  Jensen  said. 

Using  the  direct-connect 
methodology  in  Version  8.8, 
buyers  will,  for  example,  be 
able  to  go  directly  to  the  Of¬ 
fice  Depot  Web  site,  grab  in¬ 
ventory  data  and  use  it  to  pop¬ 
ulate  the  city’s  own  purchase- 
order  documents  online. 

About  35%  of  the  city’s  pro¬ 
curement  will  be  automated  in 
that  way,  reducing  the  amount 
of  manual  data  entry  needed 
and  streamlining  the  process, 
Jensen  said. 

The  new  software  will  also 
help  reduce  the  number  of  big- 
ticket  items  the  city  has  on 
hand,  such  as  computers  and 
related  equipment.  Rather  than 
warehouse  those  items,  the  city 
can  ensure  that  its  vendors  will 
have  stock  nearby  and  thus  be 
able  to  deliver  it  the  next  day. 


PeopleSoft  Product  Exec 
Follows  CEO  Out  the  Door 


BY  MARC  L.  SONGINI 

Just  two  weeks  after  People- 
Soft  Inc.  ousted  former  CEO 
Craig  Conway,  the  business 
applications  vendor  said  that 
another  top  executive  —  Ram 
Gupta,  who  had  been  execu¬ 
tive  vice  president  of  products 
and  technology  —  has  left  the 
company. 

PeopleSoft  spokesman  Steve 
Swasey  last  week  confirmed 
Gupta’s  exit  from 
the  company  but  de¬ 
clined  to  disclose 
any  details,  leaving 
it  unclear  whether 
Gupta  was  fired  or 
left  voluntarily.  “We 
don’t  discuss  the  de¬ 
parture  of  employ¬ 
ees  and  personal 
employee  business,” 

Swasey  said. 


Gupta  was  the  executive  in 
charge  of  integrating  People- 
Soft’s  applications  and  the 
software  developed  by  J.D. 
Edwards  &  Co.,  which  People- 
Soft  acquired  last  year.  In  an 
interview  with  Computerworld 
in  August,  Gupta  said  the 
merger  had  provided  J.D.  Ed¬ 
wards  users  with  more  prod¬ 
uct  choices  and  better  techni¬ 
cal  support  offerings  [Quick- 
Link  48964], 

But  many  J.D. 
Edwards  users  have 
said  that  life  under 
PeopleSoft’s  owner¬ 
ship  has  been  a 
mixed  bag  and  that 
they  remain  uncon¬ 
vinced  about  the 
benefits  of  the  ac¬ 
quisition.  And  dur¬ 
ing  his  keynote 
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It’s  unclear  whether 
RAM  GUPTA’S  exit 
from  PeopleSoft 
was  voluntary. 


speech  at  PeopleSoft’s  Con¬ 
nect  2004  user  conference  the 
week  before  he  was  fired, 
Conway  acknowledged  that 
the  company  had  made  well- 
intentioned  errors  while  try¬ 
ing  to  implement  some  of  its 
software  licensing  and  up¬ 
grade  policies  with  the  J.D. 
Edwards  user  base. 

PeopleSoft’s  board  removed 
Conway  from  his  position  as 
president  and  CEO  on  Oct.  1, 
saying  that  it  had  lost  confi¬ 
dence  in  his  ability  to  lead  the 
company.  Co-founder  Dave 
Duffield,  who  had  given  up  the 
CEO  job  to  Conway  in  1999, 
was  brought  back  to  run  the 
software  vendor. 

Stan  Swete,  who  worked  as 
an  executive  at  PeopleSoft  be¬ 
tween  1992  and  2002  and  was 
one  of  the  principal  architects 
of  its  flagship  PeopleSoft  8 
product  line,  was  hired  to 
replace  Gupta,  according  to 
Swasey.  He  said  Swete’s  re¬ 
turn  to  the  company  demon¬ 


strates  Duffield’s  commitment 
“to  re-energize  PeopleSoft’s 
innovation  and  technology 
development.” 

John  Moore,  an  analyst  at 
ARC  Advisory  Group  Inc.  in 
Dedham,  Mass.,  said  Gupta’s 
departure  was  more  a  matter 
of  when  than  if  following 
Duffield’s  return  and  the  ap¬ 
pointment  of  PeopleSoft  board 
member  Aneel  Bhusri  as  vice 
chairman  with  responsibility 
for  the  company’s  product  and 
technology  strategy. 

An  open  question  is  whether 
an  18-month-old  initiative  for 
simplifying  installation  and 
management  of  PeopleSoft’s 
applications  will  now  fade 
away,  Moore  said.  Conway  and 
Gupta  had  championed  the 
Total  Ownership  Experience 
initiative.  The  simplification 
strategy  was  well  received  by 
users,  Moore  said,  but  he 
added  that  as  a  way  of  gaining 
new  business  for  PeopleSoft, 
“it  fell  flat.”  ©  50100 


In  addition,  strategic  sourcing 
software  will  allow  the  general 
services  department  to  pull  in 
vendor  solicitations  from  all 
over  the  Web  and  get  the  best 
discounts. 

Yet  those  changes  haven’t 
caused  a  repeat  of  the  morale 
woes  of  2001. 

In  an  effort  to  ensure  proj¬ 
ect  success,  the  general  ser¬ 
vices  department  will  spend 
money  upfront  for  change 
management  to  make  sure 
changes  are  communicated  to 
city  personnel  and  adequate 
training  on  the  new  system  is 
provided  prior  to  the  rollout. 

Hard  Lesson 

Officials  said  that  communica¬ 
tion  strategy  results  from  a 
hard  lesson  learned  from  the 
initial  rollout  —  good  change 
management  requires  a  plan 
that  identifies  anyone  on  the 
city  workforce  whose  role  can 
change  because  of  the  new 
software. 

“The  plan  needs  to  identify 
champions,  owners,  stake¬ 
holders  and  users  and  what 
and  when  you  will  communi¬ 
cate  with  them  and  the  media 
used  for  that  communication,” 
Jensen  explained.  “The  other 
part  is  how  to  self-motivate 
these  folks  to  want  to  spread 
the  word  that  the  change  is 
good  and  should  be  supported.” 

There  wasn’t  adequate  plan¬ 
ning  in  2000,  Jensen  said,  and  a 
lack  of  communication  with 
city  personnel  caused  signifi¬ 
cant  resistance  from  users,  par¬ 
ticularly  in  those  departments 
where  the  PeopleSoft  applica¬ 
tions  caused  employees  to  lose 
application  support,  personnel 
and  buying  authority. 

“We  weren’t  popular,”  Jen¬ 
sen  said.  “Change  is  hard,  so 
the  police  and  fire  and  sanita¬ 
tion  departments  were  leading 
the  charge  to  go  back  to  the 
thrilling  days  of  yesteryear.” 

It  took  almost  four  years, 
Jensen  said,  but  the  planning 
effort  for  the  latest  implemen¬ 
tation  has  encountered  little 
resistance  so  far.  ©  50106 


FIXIN6  A  SOFTWARE  MESS 

Jensen  explains  how  L.A.  was  able  to 
convert  user  resistance  into  support: 

©QuickLink  50107 
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YOU  MAY  NOT  HAVE  TIME  TO  ST 
THE  TCO  OF  WINDOWS  AND  LINUX, 
BUT  THE  YANKEE  GROUP  DOES. 


" For  midsized  and  large  organizations,  a  significant 
Linux  deployment  will  neither  be  free  nor  easily 
accomplished.  In  fact,  respondents  at  large 
organizations  reported  that  a  wholesale  switch  to 
Linux  from  Windows  or  Unix  would  significantly 
increase  TCO  for  the  forseeable  future." 

-Laura  DiDio,  The  Yankee  Group,  April 2004 
Linux,  Unix,  and  Windows  TCO  Comparison 


The  Yankee  Group,  a  global  research  and  consulting  firm,  concluded 
that  a  significant  switch  to  Linux  from  Windows  or  Unix  could  cost  three 
to  four  times  as  much  without  delivering  tangibly  better  performance  or 
business  value.  These  findings  are  based  on  a  non-sponsored  worldwide 
survey  of  1,000  IT  administrators  and  C-level  executives  in  midsized 
and  large  enterprises. 

To  get  the  full  study,  visit  microsoft.com/getthefacts 


©  2004  Microsoft  Corporation.  All  rights  reserved.  Microsoft,  Windows,  the  Windows  logo,  and  Windows  Server  System  are  either  registered  trademarks  or  trademarks  of  Microsoft 
Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 


Windows 
Server  System 
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Broadcom/5 the  pulss  logo,  Connecting  everything® the  Connecting  everything 
logo  or.d  NelXtmme"  are  trademarks  of  Broadcom  Corporation  and/or  its 
subsidiaries  in  the  United  States  and  certain  other  countries.  All  other  trade- 
'-  jrics  are  tne  oroperty  of  their  respective  owners. 

‘  'DC,  NuNvork  Qviev.'  August.  2003. 

/  Chariot  Networking  Test  Suite  (Transmit/Receive).  Version  A  A 

•:!  •  .T  NftXtivrme**  SCM5  782/5705  Gb£  /a.  Intel  Pro  lOOOMTv;  September,  2003. 
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HOW  CLOSE  ARE  YOU  TO  THE 
NEXT  GENERATION  OF  NETWORKING? 

THE  ANSWER  IS  JUST  BENEATH  THE  SURFACE 


Within  your  desktops,  notebooks,  switches  and  servers  are  chips  enabling  your  business  to  operate  in  real  time,  delivering  Gigabit 
speed  both  reliably  and  securely.  When  the  top  10  computer  and  networking  equipment  brands  need  unsurpassed  performance, 
they  turn  to  us.1  Broadcom®  chips  are  two  to  three  times  faster  than  the  closest  competitor’s  in  delivering  network  throughput  on 
your  demanding  applications.2  Whether  you’re  wired  or  wireless,  networking  hardware  built  with  Broadcom  technology  ensures 
the  devices  you  use  today— as  well  as  those  you  add  tomorrow— will  connect  easily  and  seamlessly  across  air,  fiber  and  copper. 


Learn  how  building  upon  Broadcom®  chips 
end-to-end  can  provide  you  with  faster  network 
performance.  Download  the  latest  update  of  our 
e-book,  “Architecting  Next-Generation  Networks," 

now  at  www.gobroadcom.com/ebook 
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Komar  Launches  IT  Investment  Firm 


BY  SCARLETT  PRUITT 

CANNES.  FRANCE 

Sanjay  Kumar,  the  former 
chairman  and  CEO  of  Com¬ 
puter  Associates  International 
Inc.,  made  a  surprise  appear¬ 
ance  at  the  ETRE  2004  confer¬ 
ence  here  last  Monday,  three 
weeks  after  he  was 
indicted  in  U.S.  Dis¬ 
trict  Court  for  secu¬ 
rities  fraud  and  ob¬ 
struction  of  justice. 

Kumar,  who  is 
charged  with  taking 
part  in  a  fraudulent 
accounting  scheme 
at  CA  during  1999 
and  2000,  wasn’t  list¬ 
ed  as  a  speaker  on 
the  conference’s  pre¬ 


liminary  agenda.  He  didn’t 
comment  directly  about  his  in¬ 
dictment,  but  he  described  his 
departure  from  CA  in  June  af¬ 
ter  17  years  with  the  software 
vendor  as  the  start  of  a  new 
chapter  in  his  life. 

“There  are  still  tremendous¬ 
ly  exciting  things  to 
do,”  Kumar  told  the 
audience  of  IT  in¬ 
dustry  executives 
and  venture  capital¬ 
ists.  “I’m  focused  on 
building  new  tech¬ 
nology  companies 
today.”  He  said  he 
hopes  to  mentor 
start-ups,  adding 
that  emerging  tech¬ 
nologies  such  as 


voice-over-IP  telephony  are 
creating  marketing  opportuni¬ 
ties  for  vendors. 

In  a  follow-up  interview, 
Kumar  said  he  attended  the 
ETRE  conference  to  network 
and  to  hunt  for  companies  to 
invest  in.  He  said  that  after 
leaving  CA,  he  took  a  vacation, 
thought  about  what  he  wanted 
to  do  and  decided  to  launch  a 
technology  investment  firm.  “I 
think  it’s  a  really  good  way  to 
give  back  to  the  industry  and 
create  jobs,”  Kumar  said. 

Advice  ‘On  Demand’ 

OnDemand  Partners  LLC, 
which  he  started  two  months 
ago  with  a  group  of  other  IT 
veterans,  offers  advice,  money 


and  development  support  to 
start-ups.  Kumar  said  that 
because  of  his  background 
in  enterprise  software  and 
his  endorsement  of  subscrip¬ 
tion-based  pricing  approach¬ 
es,  he  is  focusing  on  those 
two  areas. 

The  Locust  Valley,  N.Y.- 
based  firm’s  name  is  a  play  on 
words  that  refers  to  both  on- 
demand  computing  and  the 
way  in  which  the  company’s 
partners  will  step  in  to  help 
companies  “on  demand,”  Ku¬ 
mar  said.  OnDemand  Partners 
currently  is  working  with  14 
vendors  and  is  on  the  lookout 
for  more,  he  added. 

Kumar  was  indicted  last 
month  by  a  federal  grand  jury 
in  Brooklyn,  N.Y.,  for  allegedly 
participating  in  an  accounting 
scheme  at  CA.  Prosecutors 


charged  that  CA  adopted  a  so- 
called  35-day  month  account¬ 
ing  policy,  under  which  some 
sales  contracts  that  were 
signed  after  a  fiscal  quarter 
had  ended  were  backdated  so 
that  they  appeared  to  have 
been  completed  during  the 
quarter  [QuickLink  49647]. 

Stephen  Richards,  CA’s  for¬ 
mer  head  of  worldwide  sales, 
was  also  indicted.  Both  Kumar 
and  Richards  pleaded  not 
guilty.  Their  indictments 
were  announced  on  the  same 
day  that  CA  agreed  to  pay 
$225  million  to  reimburse 
shareholders  for  the  alleged 
fraud  as  part  of  a  settlement 
deal  with  the  U.S.  Department 
of  Justice.  ©  50086 


Pruitt  is  a  reporter  for  the 
IDG  News  Service. 


KUMAR  plans  to 
“give  back  to  the 
industry  and 
create  jobs.” 
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Sarb-0x 

Todd  Naughton,  vice  presi¬ 
dent  and  controller  at  Zebra 
Technologies  Corp.,  said  the 
Vernon  Hills,  Ill.-based  sup¬ 
plier  of  printer  components 
“really  just  started  looking”  at 
general  IT  controls  within  the 
past  three  months. 

For  the  past  year,  Zebra  has 
focused  on  documenting,  re¬ 
mediating  and  testing  applica¬ 
tion-level  controls  throughout 
the  organization,  including 
mapping  defined  job  roles  to 
the  system  access  levels  they 
require,  said  Richard  Jaszka, 
the  company’s  internal  audit 
manager. 

“That  said,  we’re  concerned 
about  our  ability  to  meet  the 
Section  404  requirements  of 

KHBBZQESSn 

Sarbanes-Gxley 

WHAT  ITIS:  The  Sarbanes-Oxley 
Act  requires  most  large  companies 
to  attest  to  the  financial  and  IT  con¬ 
trols  they  have  in  place  for  fiscal 
years  that  will  end  on  or  after  Nov. 

15. 2004,  in  their  annual  reports. 

WHY  IT  MATTERS:  Few  IT  staf¬ 
fers  know  much  about  tire  controls 
Thai  support  general  IT  activities. 

That  Is  typically  overseen  by  internal 
audit  and/or  IT  audit  departments. 


Sarbanes-Oxley  for  the  other 
IT  controls,”  said  Jaszka.  For 
example,  although  Zebra  has 
documented  policies  for  key 
areas  such  as  change  manage¬ 
ment,  systems  development 
and  mission-critical  computer 
operations,  “it  will  be  a  chal¬ 
lenge  to  properly  test  these 
controls  and  address  any  nec¬ 
essary  remedies  by  year-end,” 
Jaszka  said. 

He  added  that  regulators 
haven’t  specified  which  IT 
controls  need  to  be  document¬ 
ed  and  tested. 

Compliance  Gap 

Stan  Lepeak,  an  analyst  at 
Meta  Group  Inc.,  said  he 
wouldn’t  be  surprised  if  25% 
of  accelerated  filers  are  found 
to  have  inadequate  controls. 
He  based  his  estimate  on  sev¬ 
eral  factors,  including  discus¬ 
sions  with  clients,  Sarbanes- 
Oxley  readiness  surveys  con¬ 
ducted  with  client  firms,  and 
concerns  expressed  by  cus¬ 
tomers  who  outsource  IT  that 
service  providers  won’t  be 
able  to  document  the  IT  con¬ 
trols  in  time. 

“It  really  depends  on  how 
strict  external  auditors  will  be 
in  determining  what  are  mate¬ 
rial  weaknesses  or  deficien¬ 
cies  in  controls  and  what 
aren’t,”  said  Lepeak. 

Herman  Miller  Inc.,  a  Zee- 
land,  Michu-based  maker  of 


office  furniture,  decided  this 
past  spring  to  adopt  a  set  of 
guidelines  for  evaluating  IT 
controls  called  Control  Objec¬ 
tives  for  Information  and  Re¬ 
lated  Technologies,  or  Cobit, 
created  by  the  IT  Governance 
Institute  and  the  Information 
Systems  Audit  and  Control 
Association,  both  of  which  are 
based  in  Rolling  Meadows,  Ill., 
said  Rich  Russell,  director  of 
application  development. 

“We  worked  with  our  audi¬ 
tors  to  determine  which  of  the 
Cobit  processes  were  in  scope 
for  [Section]  404  and  then  we 
focused  on  those,”  said  Rus¬ 
sell,  whose  company  has  until 
May  31,  2005,  to  attest  to  its  IT 
and  financial  controls. 

Wyndham  International  Inc. 
has  been  working  with  several 
consulting  firms  since  last 
year  to  document  its  IT  con¬ 
trols,  said  Mark  Hedley,  senior 
vice  president  and  chief  tech¬ 
nology  officer  at  the  Dallas- 
based  hotel  chain. 

As  a  result,  Wyndham  “has 
very  high  confidence  in  our  IT 
key  internal  controls  that  will 
receive  the  scrutiny  of  our 
Sarbanes  audit  team,”  he  said. 
©  50093 


MORE  ABOUT  SARB-OX 

Documentation  software  helps  companies 
that  have  more  time  to  comply: 

O  QuickLink  50068 
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Later  Timetable  Gives  Some 
Filers  More  Wiggle  Room 


SOME  COMPANIES  that  can 
wait  until  2005  or  later  to  meet 
the  initial  Section  404  require¬ 
ments  of  the  Sarbanes-Oxley 
Act  have  already  spent  months 
working  on  IT  control  assess¬ 
ments  and  are  well  positioned 
to  complete  their  documenta¬ 
tion  and  testing  efforts  ahead  of 
schedule. 

For  instance,  Science  Appli¬ 
cations  International  Corp.  in 
San  Diego  began  evaluating  its 
IT  controls  in  July  2003  and 
started  documenting  them  last 
December  -  even  though  the  re¬ 
search  and  engineering  compa¬ 
ny  doesn’t  have  to  attest  to  those 
controls  until  Jan.  31, 2006,  said 
John  R.  Hartley,  SAIC’s  director 
of  accounting  operations. 

While  SAIC  isn’t  an  acceler¬ 
ated  filer,  “that  doesn’t  alter  the 
priority,  attention  or  resources 
that  we  place  on  our  Sarbanes- 
Oxley  activities,”  said  CIO  Cora 
Carmody.  “It  has  been,  and  will 
continue  to  be,  my  top  priority 
in  IT  and  the  corporation’s  top 
priority.” 

Flerman  Miller  Inc.,  a  maker 
of  office  furniture,  began  evalu¬ 
ating  its  IT  controls  in  March  and 


expects  to  finish  internal  testing 
by  year’s  end.  External  auditors 
will  conduct  tests  in  February 
2005  to  meet  the  May  31  dead" 
line,  said  Rich  Russell,  director 
of  application  development. 

“At  the  outset  of  our  compli¬ 
ance  efforts,  we  did  not  under- 
:  stand  the  requirements  for  IT 
controls  -  we  were  more  fo¬ 
cused  on  application  controls,” 

:  he  said.  Russell  and  his  col¬ 
leagues  discovered  that  IT  is 
a  foundational  piece  of  Flerman 
Miller’s  controls  architecture 
'  after  a  more  thorough  study 
of  the  company’s  IT  control 
:  issues. 

Even  though  Portland  Gener¬ 
al  Electric  Co.  doesn’t  have  to 
meet  its  Section  404  require¬ 
ments  until  December  2005, 
the  utility  recently  completed  its 
IT  control  design  assessment 
and  is  planning  to  begin  testing 
those  controls  by  the  end  of  this 
month,  said  Ross  Wescott,  chief 
IT  auditor  at  the  Portland,  Ore.- 
based  electric  utility. 

Said  Wescott,  “It  is  our  goal 
to  practice  for  a  year,  so  when  it 
comes  to  reality,  we’re  ready.” 

-  Thomas  Hoffman 
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Legendary  Reliability® 
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"More  computing  power,  but  with  more  heat... 
presents  a  serious  problem  for  companies  unprepared 
to  meet  the  cooling  demands  of  a  data  center. 

APC  plays  the  hero  with  a  three-component  environmental  system." 

InfoWorld  3/12/2004 
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Part  Number 

Usable  IT  Racks 

kW  per  Rack 

Price 

ISXT2MD6R 

6 

up  to  5kW 

$1 49,999* 

ISXT2MD11R 

11 

up  to  5kW 

$249,999* 

ISXT2MD40R 

40 

up  to  5kW 

$699,999* 

ISXT2MD100R 

100 

up  to  5kW 

$1 ,649,999* 

High  Density  Configuration  (shown  above) 

ISXT2HD8R 

8 

up  to  1 0kW 

$399,999* 

High  density  upgrades  start  at  *10,999 
On-site  power  generation  options  start  at  *29,999 


All  configurations  feature: 

V  N+l  power  and  cooling 

V  Secure,  self-contained  environment 
/  Integrated  management  software 

V  Enhanced  service  package 


Jfu 


Infrastructure 


POWER  RACK  COOLING 


On-demand  architecture  for  network- 
critical  physical  infrastructure 


Order  your  solution  today.  Call  888-289-APCC  x3256. 


InfraStruXure™ 
BuildOut  Tool 


What  is 
data  center 
on  demand? 

Highly  available  and  manageable, 
quick-to-install,  scalable  architecture 
that  easily  supports  both  standard- 
and  high-density  applications. 

-  Up  to  20 kW  a  rack 

-  Unlimited  racks 

-  Ships  in  5  days** 

-  Installs  in  1  day** 

-  Optional  on-site 
power  generation 

-  Raised  floor  optional 


Don't  see  the  configuration  you  need? 

Try  APC's  online  InfraStruXure™  BuildOut  Tool 
today  and  receive  3  FREE  APC  white  papers. 

Go  to  www.pronuupc£om  and  enter  key  code  u600y 


Need  a  different  configuration? 

Try  our  free  online  InfraStruXure” 
BuildOut  Tool  to  find  out  more. 


Legendary  Reliability 


*  Prices  do  not  include  IT  equipment  **  Install  and  delivery  times  may  van/ 
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Dillard’s  department  stores  found  a  real  bargain. 
Xerox  assessed  and  streamlined  their  company-wide  work 
processes  and  printing  needs,  saving  them  $1.6  million. 

There’s  a  new  way  to  look  at  it. 
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Oracle  Exec  Defends  Pricing 
Policy  on  Multicore  Systems 


BY  THOMAS  HOFFMAN 

The  development  of  servers  based  on 
multicore  processors,  in  which  two  or 
more  CPUs  are  placed  on  a  chip,  has 
raised  concerns  among  some  IT  man¬ 
agers  that  the  new  technology  will  result 
in  significant  software  cost  increases 
[QuickLink  49648].  Jacqueline  Woods, 
vice  president  of  global  licensing  and 
pricing  strategy  at  Oracle  Corp.,  dis¬ 
cussed  the  company’s  multicore  pricing 
plans  with  Computerworld  this  month. 

What  is  Oracle’s  position  on  soft¬ 
ware  licensing  for  dual-core  proc¬ 
essors?  We  don’t  have  a  posi¬ 
tion  with  respect  to  dual-core 
processors.  A  core  is  equal  to  a 
CPU,  and  all  cores  are  required 
to  be  licensed.  Therefore,  you 
are  required  to  have  two  proc¬ 
essor  licenses. 

Does  this  represent  a  change  in  Oracle’s 
licensing  policy?  We  have  not  changed. 
We  have  not  increased  our  prices.  At 
the  end  of  the  day,  the  consumption  of 
the  Oracle  software  is  unchanged. 

Has  multicore  server  software  pricing  be¬ 
come  a  contentious  issue  between  Oracle 
and  your  customers?  Not  at  all.  IBM 
does  not  sell  any  single-core  CPU  ma¬ 
chines.  All  of  their  machines  are  dual¬ 
core  and  have  been  for  some  time.  It’s 
particularly  interesting  that  a  hardware 
vendor  that  I  won’t  necessarily  men¬ 
tion  who  came  out  with  a  [dual-core] 


UltraSparc  III  chip  on  a  single  wafer 
should  try  to  change  the  way  the  soft¬ 
ware  is  licensed.  When  it  was  called 
into  question,  we  clearly  made  sure 
that  everyone  understands  that  a  core 
equals  a  processor. 

So  if  a  user  moves  from  a  single-processor 
server  to  a  two-way  server,  do  they  essen¬ 
tially  have  to  pay  double  for  software  on  the 
newer  machine?  If  I  have  more  proces¬ 
sors,  do  I  pay  more  money?  Yes.  You 
have  to  pay  for  the  one  incremental 
processor  that  you  have  not  li¬ 
censed.  If  you  had  a  four-way 
node  and  you  want  to  go  to  an 
eight-way,  you  need  more  incre¬ 
mental  processors.  Do  you  pay 
for  eight  processors?  Yes. 

Some  analysts  and  IT  managers  be¬ 
lieve  that  large  software  vendors  like 
Oracle  and  IBM  are  taking  advan¬ 
tage  of  multicore  systems  to  drive  higher 
revenues  following  a  period  of  weak  tech 
spending.  How  would  you  respond?  That’s 
not  an  accurate  statement.  We  have 
had  this  policy  for  years.  We  had  it 
during  the  downturn,  and  we  have  it 
now.  It  hasn’t  changed.  If  someone  li¬ 
censed  software  on  a  dual-core  ma¬ 
chine  during  the  downturn,  they  paid 
for  two  processors.  I  don’t  see  the  re¬ 
covery  of  the  economy  as  an  opportu¬ 
nity  to  leverage  the  advent  of  multi¬ 
core,  considering  this  had  been  the 
same  policy  when  the  economy  was 
worse  off  than  it  is  now.  ©  50053 


Coding  Error  Shuts  Down  PayPal 


BY  TODD  R.  WEISS 

PayPal  Inc.’s  online  payment  Web  site 
slowly  returned  to  normal  operations 
last  week  after  an  unspecified  coding 
error  virtually  shut  down  the  site  for 
four  days. 

The  problems  began  on  Oct.  8, 
when  a  failed  routine  monthly  code 
update  wreaked  havoc  for  many  eBay 
users  who  couldn’t  make  or  collect 
payments.  The  PayPal.com  Web  site  is 
owned  by  eBay  Inc. 

Sara  Bettencourt,  a  spokeswoman  for 
San  Jose-based  PayPal,  said  the  compa¬ 
ny  doesn’t  know  how  many  users  were 
affected.  After  PayPal  and  eBay  engi¬ 
neers  worked  around  the  clock  for 
days  early  last  week  fixing  the  prob¬ 
lem,  Bettencourt  said,  the  system  was 
allowing  “most  users  to  transact  with¬ 


out  incident.”  She  wouldn’t  disclose 
the  type  of  coding  error. 

PayPal.com  has  about  50  million 
user  accounts,  15.5  million  of  which 
are  active,  Bettencourt  said.  Account 
data  and  personal  information  weren’t 
compromised,  according  to  PayPal. 

A  Virginia-based  eBay  seller,  who 
asked  that  his  name  not  be  used,  said 
he  wasn’t  sure  whether  the  glitches 
with  PayPal.com  reduced  his  sales  over 
the  weekend  of  the  failure.  But  he  not¬ 
ed  that  the  upgrade  problems  are  remi¬ 
niscent  of  frustrating  incidents  he  has 
experienced  with  eBay  site  changes 
that  were  touted  as  “improvements.” 

“EBay  would  change  formats  on  the 
site  and  had  the  same  problem”  with 
users  having  difficulty  logging  in  and 
making  purchases,  he  said.  ©  50059 


Dillard’s  department  stores  hire  over  10,000  people  a 
year.  Storing  and  retrieving  application,  training  and 
benefits  packets  had  become  costly.  So  Dillard’s  bought 
into  something  smart:  a  Xerox  Office  Document 
Assessment  (ODA). 

Xerox  examined  their  work  process  across  all 
14  Dillard’s  business  units  and  recommended  key 
improvements. 

First,  all  analog  copiers,  stand-alone  printers 
and  fax  machines  were  replaced  by  Xerox 
DocumentCentre®  multifunction  systems.  Then  Xerox 
DocuShare®  was  installed  on  Dillard’s  network. 

This  cross-platform  document  system,  along  with  Xerox 
imaging  software,  digitized  key  business  processes. 

Now,  instead  of  storing  and  distributing  hard  copy 
documents  with  each  new  hire,  store  managers  go 
online  for  hiring  packets  and  print  forms  on  the  spot. 
No  paper  inventory.  No  outdated  information.  $1.6 
million  saved.  To  see  what  you  can  save,  call  us  or  visit 
our  website. 


xerox.com/learn 
1-800-ASK-XEROX  ext.  LEARN 
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DON  TENNANT 


Expect  Nothing 


THERE’S  A  SCHOOL  OF  THOUGHT  that 
says  you  should  keep  people’s  expecta¬ 
tions  of  you  very  low.  That  way,  if  you 
ever  accomplish  anything  even  margin¬ 
ally  above  average,  they’ll  be  really  im¬ 
pressed.  Sun  Microsystems  and  Microsoft  probably 
would  have  done  us  all  a  favor  if  they’d  followed  that 
advice  last  April. 


As  you  may  recall,  that 
was  when  Sun  and  Micro¬ 
soft  proclaimed  that  they 
had  settled  all  their  dif¬ 
ferences  and  that  a  new 
era  of  cooperation  had 
dawned.  The  quote  attrib¬ 
uted  by  Sun’s  PR  machine 
to  CEO  Scott  McNealy, 
while  a  little  stilted,  con¬ 
veyed  a  collaborative  spir¬ 
it  that  was  full  of  promise: 

“This  agreement  will  be  of 
significant  benefit  to  both 
Sun  and  Microsoft  cus¬ 
tomers.  It  will  stimulate  new  products, 
delivering  great  new  choices  for  cus¬ 
tomers  who  want  to  combine  server 
products  from  multiple  vendors  and 
achieve  seamless  computing  in  a  het¬ 
erogeneous  computing  environment.” 

Now  that  we’ve  passed  the  six- 
month  mark,  I  thought  it  would  be 
worthwhile  to  find  out  exactly  how 
those  customers  have  benefited  since 
the  Great  Pronouncement.  So  last 
week  I  asked  John  Loiacono,  executive 
vice  president  of  Sun’s  software  group, 
how  the  deal  had  changed  things. 

“Our  conversations  with  customers 
have  changed  pretty  dramatically,  in 
that  it  used  to  be  we  had  to  say  bad 
words  every  time  we  mentioned  Mi¬ 
crosoft,”  Loiacono  responded.  “The 
fact  is,  we  no  longer  have  to  do  that  be¬ 
cause  we’re  doing  a  lot  more  coopera¬ 
tive  work  with  them  versus  what  we 
were  doing  previously.” 

Let  me  get  this  straight:  What  has 
changed  is  that  Sun  doesn’t  use  bad 
words  when  it  talks  about  Microsoft 
anymore.  Well,  that’s  just  delightful. 
But  I  was  hoping  to  hear  something  a 
tad  more  related  to  what  users  have 
gained,  so  I  pressed  him  a  little.  Loia- 
cono’s  response:  “You  will  see  from  us 
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within  the  next  90  days  or 
so  that  we  will  not  just  be 
talking  about  generic  con¬ 
cepts,  but  actually  talking 
more  specifically  about 
things  we’re  doing  with  Mi¬ 
crosoft  and  actually  show¬ 
ing  some  examples  of  prog¬ 
ress  that  we’ve  made.” 

Ninety  days?  Interesting. 
McNealy  had  said  at  Java- 
One  in  June  that  the  com¬ 
panies  would  detail  their 
collaborative  work  during 
the  summer,  and  that  didn’t 
happen.  Then,  last  month,  Mark  Mc¬ 
Clain,  vice  president  of  software  mar¬ 
keting  at  Sun,  said  there  would  be 
some  sort  of  interoperability  an¬ 
nouncement  this  month  [QuickLink 
49414].  We  can  give  Sun  and  Microsoft 
the  benefit  of  the  doubt  and  presume 
that  will  still  happen  (Microsoft  may 
well  be  the  chief  foot-dragger  here), 


although  Loiacono’s  “within  the  next 
90  days  or  so”  comment  last  week  sug¬ 
gested  that  anything  really  substantive 
might  be  a  little  further  out. 

Unfortunately,  the  only  thing  we 
know  now  that  we  didn’t  know  in 
April  is  that  the  Sun-Microsoft  agree¬ 
ment  included  a  provision  (kept  quiet 
by  both  companies  at  the  time)  under 
which  Microsoft  can  sue  users  and 
distributors  of  OpenOffice,  the  open- 
source  office  suite  that  Sun  acquired 
from  a  German  outfit  in  1999  and  re¬ 
leased  to  the  open-source  community 
the  following  year.  But  users  of  Star- 
Office,  Sun’s  commercial  distribution 
of  OpenOffice,  are  protected  against 
legal  liability  [QuickLink  49495].  That 
revelation  came  in  an  SEC  filing  on 
Sept.  13,  and  it  seems  fairly  self-serving 
on  Sun’s  part.  Anyone  who  was  think¬ 
ing  about  using  or  distributing  a  re¬ 
lease  of  OpenOffice  other  than  Star- 
Office  might  well  be  having  second 
thoughts.  So  much  for  community 
support. 

Then  again,  Sun  got  almost  $2  billion 
from  Microsoft  when  it  signed  that 
agreement  in  April,  so  it  had  a  lot  of  in¬ 
centive  to  be  as  agreeable  as  possible, 
regardless  of  the  impact  on  anyone  else. 
What  would  you  expect?  ©  50065 


MICHAEL  GARTENBERG 

Unbelievable, 
Scary  Babble 
About  USB 


I 


T  SEEMS  THAT  every 
week,  I  open  the  paper  or 
click  on  a  URL  and  see  the 
same  story:  Someone  is  jump¬ 
ing  on  the  bandwagon  to  tell 

the  horror  tale  of  the  potentially  scary 
Universal  Serial  Bus  port.  They  talk 
about  the  security  threat  represented 
by  the  iPod  and  other  portable  media 
players  and  by  ubiquitous  USB  flash 
memoiy  devices.  The  rhetoric  has 
reached  new  highs,  and  IT  depart¬ 
ments  are  being  told  to  ban  all  devices 
of  this  type  and  immediately  lock 
down  the  USB  ports 
on  all  machines. 

This  rhetoric 
amounts  to  another 
kind  of  USB:  “Unbe¬ 
lievable,  Scary  Bab¬ 
ble.”  Concerns  about 
the  security  of  re¬ 
movable  media 
aren’t  new,  and  nei¬ 
ther  is  removable 
storage  itself.  Any 
IT  staffers  for  whom 
this  is  suddenly  an 
issue  must  have  en¬ 
tered  the  industry 
directly  from  the 
proverbial  turnip 
truck. 

Some  of  you  might 
even  remember 
when  all  PCs  came 
with  removable  stor¬ 
age  devices  called  floppy  disks.  And  at 
a  time  when  a  hard  disk  could  store  no 
more  than  20MB  and  files  tended  to  be 
a  lot  smaller  than  they  are  today,  a  per¬ 
son  could  carry  quite  a  lot  of  sensitive 
data  on  just  a  few  floppies.  Really,  this 
issue  dates  to  when  it  was  first  possi¬ 
ble  to  cheaply  copy  sensitive  docu¬ 
ments  on  a  Xerox  machine. 

Security  was  an  issue  then,  and  it’s 
an  issue  now.  Scare  rhetoric  doesn’t 
help  anything;  it  just  gets  the  folks 
with  the  scariest  rhetoric  some  head¬ 
lines.  My  favorite  line  in  one  recent 
horror  tale  was  about  the  fear  that  in¬ 
fected  PDAs  syncing  to  a  corporate 
computer  could  pass  nefarious  code  on 
to  the  corporate  network.  Of  course, 
we  know  that  unless  the  PDA  is  run- 
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ning  the  same  operating  system  as  the 
syncing  computer,  it  won’t  do  any 
harm  at  all.  (Well,  unless  the  PDA  was 
created  by  Jeff  Goldblum  —  you  know, 
the  guy  in  the  movie  Independence  Day 
who  somehow  sends  a  computer  virus 
from  his  PowerBook  to  the  aliens’ 
mother  ship  computer,  which  was  for¬ 
tunately  not  only  compatible  but  also 
apparently  insecure  and  buggy.  Per¬ 
haps  they  left  all  the  USB  ports  open.) 

What  you  need  to  do  is  balance 
users’  needs  with  security  concerns. 
The  benefits  that  users  derive  from 
carrying  relevant  portions  of  their 
desktops  on  portable  memory  devices 
are  simply  too  great  for  IT  depart¬ 
ments  to  ignore.  Your  response  should 
involve  safe  computing  policies,  educa¬ 
tion  and  clear  rules  on  what  can  be 
taken  off-site.  And  businesses  should 
set  policies  on  segregating  personal 
data  from  corporate  machines.  IT  de¬ 
partments  must  make  sure  users  un¬ 
derstand  the  need  to  safeguard  sensi¬ 
tive  information,  whether  it’s  in  digital 
format  or  on  paper. 

Legitimate  security  concerns  sur¬ 
round  removable  media,  including 
the  potential  for  corporate  data  theft 
and  virus  attacks.  Simplistic  responses 
like  blaming  the  USB  port  or  flash 
memory  devices  aren’t  the  answer. 
“Lock  it  all  down  and  take  it  all  away” 
isn’t  a  new  philosophy,  and  it  has  failed 
time  and  again. 

Recognizing  and  accommodating 
user  needs  takes  more  work,  but  in  the 
end,  the  results  are  worth  it.  ©  49896 

VIRGINIA  ROBBINS 

Self-service 
With  a  Smile 


Recently,  it’s  felt  as  if 
my  entire  life  has  been 
spent  in  airports.  The 
airline  I  take  most  often  is 
one  of  those  low-cost  peanut 
tossers  that  specializes  in  self- 

service.  After  logging  over  80  flights  in 
the  past  year,  I  remain  a  fan  of  this  air¬ 
line.  It’s  been  just  about  a  year  since 
I’ve  had  to  interact  with  anyone  at  the 
entire  company  other  than  to  give  my 
drink  order  or  to  wish  someone  a  good 
day  as  I  deplaned.  It’s  been  great. 

Well,  except  for  the  time  I  arrived  an 
hour  after  my  flight  had  left.  The  next 
plane  to  Oakland  was  scheduled  to 
leave  in  12  minutes;  the  one  after  that 
would  land  at  close  to  midnight.  The 


customer  service  agent 
asked  me  if  I  was  willing  to 
run  through  the  airport. 

Running  seemed  better 
than  missing  dinner,  so  after 
he  quickly  rebooked  me,  he 
grabbed  my  bag,  and  off  we 
went.  We  cleared  security 
in  record  time  by  using  the 
special  employee  line.  My 
gate  was  at  the  far  end  of 
the  terminal  (of  course). 

Once  we  passed  into  his 
airline’s  area,  the  other  gate 
agents  started  cheering  him 
on:  “Go,  Bradley!  Go,  Bradley!”  He 
got  me  to  the  plane  with  three  minutes 
to  spare. 

As  the  door  closed  behind  me,  I  was 
nearly  out  of  breath  but  happy  at  the 
thought  that  I’d  be  home  for  dinner. 

Exceeding  expectations  is  a  chal¬ 
lenge  in  today’s  automated  world  of 
self-service.  If  Bradley  hadn’t  been 
overseeing  the  self-service  kiosks,  my 
experience  on  this  trip  would  have 
been  very  different. 

My  grocery  store  has  replaced  its 


express  lanes  with  self- 
service  checkout  stations. 
The  first  month  the  sta¬ 
tions  were  available,  only  a 
few  brave  shoppers  used 
them. 

The  first  time  I  tried  it, 
the  station  got  stuck  in 
some  infinite  loop,  and  I 
ended  up  grabbing  a  clerk 
to  help  me.  It  turned  out 
that  because  the  previous 
transaction  had  been  for 
beer,  the  station  needed 
to  know  whether  I  could 
legally  purchase  alcohol  before  it  could 
proceed.  I  don’t  know  if  it’s  a  good 
thing  or  a  bad  thing  that  I’m  clearly 
over  21,  but  the  clerk  entered  the  code, 
and  I  continued  scanning  my  groceries. 

A  few  weeks  later,  I  was  back  in  the 
store  and  saw  an  employee  station  lo¬ 
cated  in  the  middle  of  the  self-service 
area.  The  same  clerk  who  had  helped 
me  was  now  darting  among  the  sta¬ 
tions  helping  shoppers. 

I  also  noticed  that  a  lot  more  people 
were  using  self-service;  a  long  but 
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quickly  moving  line  had  formed  in 
front  of  the  four  stations. 

As  a  customer,  I  like  self-service;  it’s 
faster  and  I’m  in  control.  And  as  a  CIO, 
self-service  is  one  more  way  I  can  help 
my  company  reduce  expenses  by  using 
technology. 

But  the  reality  is  that  customers 
sometimes  need  someone  else  to  take 
control.  At  some  point,  the  cost  of 
programming  for  each  possible  cus¬ 
tomer  interaction  outweighs  the  cost 
of  inserting  an  employee  into  the 
transaction.  Assuming  that  the  folks 
in  marketing  want  high  levels  of  cus¬ 
tomer  satisfaction,  creating  ways  for 
skilled  humans  to  intervene  is  re¬ 
quired. 

I’d  like  to  hear  your  stories.  Send  me 
your  best  or  worst  experiences  with 
self-service,  either  as  a  provider  or  as  a 
customer,  and  I’ll  share  the  results  next 
month.  ©  49979 


OMore  columnists  and  links  to  archives  of  previous 
columns  are  on  our  Web  site: 

www.computerworld.com/columns 
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Cell  Directory  Not  Needed  -  or  Wanted 


I  COULDN’T  DISAGREE  MORE 

with  the  column  “Wireless  World 
Needs  a  Directory”  [QuickLink 
48752],  I  like  that  my  number  isn’t 
published  anywhere.  Like  a  growing 
number  of  people,  I’ve  abandoned 
my  land-line  phone.  I  choose  whom 
I  give  my  number  to.  I  appreciate 
that  no  one  can  just  look  up  my 
number.  Should  this  change,  maybe 
I’ll  switch  to  VoIP. 

Les  Bower 

Systems  administrator, 
Orefield,  Pa. 

it  111  IRELESS  WORLD  NEEDS 

¥¥  a  Directory”?  As  was 
said  in  another  context,  “This  is 
the  worst  idea  in  the  long,  sad  his¬ 
tory  of  bad  ideas.”  There  is  too 
much  sharing  of  personal  informa¬ 
tion.  I’ll  publish  my  cell  phone 
number  when  every  telemarketer 
and  spammer  (remember,  cell 
phones  get  e-mail  too)  has  been 
eliminated! 

Matt  Fleming 
Network  administrator, 
Cincinnati 

NO,  THE  WIRELESS  WORLD 

doesn’t  need  a  directory.  Wire¬ 
less  is  a  special  case  because  you 


pay  for  everything  -  incoming,  out¬ 
going,  text,  voice,  etc.  Robert 
Mitchell  should  use  his  soapbox  to 
lobby  for  no-cost  incoming  wireless 
calls  and  messages.  There  should 
be  no  cell  phone  directory.  Not  until 
no  one,  not  even  charities,  can  tele¬ 
market.  Not  until  incoming  calls  and 
text  messages  are  free  across  the 
board.  And  not  until  no  one  can 
clone  your  cell  number  and  bill  their 
calls  to  it  because  you  answered 
something  that  looked  familiar  and 
you  were  wrong. 

At  the  risk  of  being  labeled  a 
crank,  I  will  speak  out  against  a  cell 
phone  directory  until  all  incoming 
minutes  on  all  wireless  plans  are 
free.  Yes,  I  did  read  Jay  Cline’s  en¬ 
tire  article  as  well  [“Cell  Phone  Di¬ 
rectory  Rings  True,”  QuickLink 
49184],  and  I  understand  that  it  will 
be  opt-in  at  first,  with  only  new  cus¬ 
tomers  having  to  opt  out.  But  how 
long  will  it  be  before  companies 
start  charging  to  opt  out?  And  what 
constitutes  a  new  customer? 

I  have  been  going  month-to- 
month  with  my  carrier  for  a  while 
now.  Today,  I  entered  into  a  con¬ 
tract  for  a  year  to  take  advantage  of 
a  deal.  The  provider  could  argue 
that  since  the  contract  is  new,  even 


though  the  account  is  not,  it  con¬ 
stitutes  new  service. 

B.A.  Clouse 

Education  program  manager, 
Baltimore, 

bamyclouse@hotmail.com 


Don’t  Forget  Alpha 

THANKS  for  the  coverage  of  the 
VAX  and  VMS  community, 
which  tends  to  be  ignored  these 
days,  and  for  the  positive  words 
about  the  future  of  VMS  on  Itanium. 
Too  many  people  mistakenly  think 
VMS  died  long  ago. 

But  I’m  amazed  that  the  article 
[“VAX  Users  See  the  Writing  on  the 
Wall,"  QuickLink  47934]  never  men¬ 
tioned  Alpha.  The  path  of  least  resis¬ 
tance  (and  least  expense)  for  most 
VAX  users  has  been  to  retain  their  ex¬ 
isting  software  and  migrate  to  newer 
Alpha  hardware,  still  running  the 
VMS  operating  system.  In  most  cas¬ 
es,  it’s  been  “recompile,  relink  and 
go”  for  their  programs,  but  in  cases 
where  source  code  has  been  lost,  the 
VEST  utility  is  used  to  convert  a  VAX 
binary  image  to  an  Alpha  one. 

Some  VAX  users  may  choose  to 
move  straight  from  VAX  to  Itanium, 
skipping  Alpha  entirely.  But  HP  still 
develops  and  sells  Alpha  systems 
(and  will  through  at  least  2006)  and 


will  support  them  for  a  minimum  of 
five  years  after  last  sale,  whenever 
that  occurs.  For  most  VAX  users, 
moving  to  Windows,  Unix  or  Linux 
involves  very  costly  code  rewrites  or 
wholesale  replacement  of  applica¬ 
tions,  and  they  tend  to  find  that  those 
platforms  don’t  provide  the  stability, 
reliability,  high  availability,  security 
(there  are  no  viruses  on  VMS,  for  ex¬ 
ample),  low  system  administrator 
workload  and  low  TCO  that  they 
have  become  accustomed  to  with 
VMS.  So  for  most  VAX  users  today, 
sticking  with  VMS  and  simply  mov¬ 
ing  to  newer  hardware  (including  Al¬ 
pha)  is  the  lowest-cost,  lowest-effort  j 
and  least-risky  option  to  consider. 

Keith  Parris 
Colorado  Springs 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 

They  should  be  addressed  to 
Jamie  Eckle,  letters  editor,  Com- 
puterworld,  PO  Box  9171, 1  Speen 
Street,  Framingham,  Mass.  01701. 
Fax:(508)879-4843.  E-mail: 
letters@computerworld.com. 

Include  an  address  and  phone 
number  for  immediate  verification. 

OFor  more  letters  on  these  and 
other  topics,  go  to 

www.computerworid.com/letters 


Can  you  see  it? 


Middleware  is  Everywhere 
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MIDDLEWARE  IS  IBM  SOFTWARE.  WebSphere  Portal, 
part  of  the  IBM  Workplace  Family,  connects  partners, 
employees,  and  customers  worldwide.  It’s  how  to  access 
multiple  applications  on  one  screen  and  on  virtually  any 
kind  of  device.  An  end-to-end  solution  that  helps  improve 
productivity  and  reduce  costs  as  it  enables  on  demand 
business.  It’s  an  accessory  that  you  just  can’t  live  without. 


1.  Sales  associate  checks  online  inventory. 

2.  Manager  uploads  revenue  goals. 

3.  Supervisor  gets  employee  overtime  info. 

4.  Cashier  IMs  downtown  store  location. 

5.  Everyone  accessing  info  via  one  portal. 


i/middleware/portals  fill  DEMAND  BUSINESS" 


Middleware  for  the  on  demand  world.  Learn  more  at  ibm.com, 
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Business  application  software  seldom 
fulfills  its  promises.  In  fact,  installing 
on  time  and  on  budget  is  almost 
unheard  of  in  the  industry.  That’s  why 
Lawson  is  dedicated  to  doing  things 
differently.  We’re  breaking  away  from 
the  status  quo,  and  providing  software 
and  services  that  put  time  on  your 
side.  Our  applications  can  help  you  to 
streamline  processes,  reduce  costs, 
improve  service  and  create  a  bigger 
competitive  advantage,  so  you  can 
find  time  you  never  knew  existed. 
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EVuTEATRI 


Despite  vendor  assurances,  researchers 
remain  concerned  about  the  security  and  reliability 
of  electronic  voting  systems.  BY  DAN  VERTON 


his  November,  as  many 
as  50  million  Americans 
could  vote  for  president 
using  some  form  of  elec¬ 
tronic  touch-screen  sys¬ 
tem,  the  vast  majority  of 
which  have  been  designed 
by  McKinney,  Texas-based  Diebold 
Election  Systems.  That  has  some  IT 
and  security  researchers  holding 
their  breath  because  of  the  faulty 
track  record  of  Diebold’s  technolo¬ 
gy  and  a  government-endorsed 
testing  and  certification  process 
that  they  say  is  deeply  flawed. 

Those  critics  say  that  direct 
recording  electronic  (DRE)  voting 
systems  remain  vulnerable  to  ma¬ 
nipulation  and  malfunction,  partic¬ 


ularly  in  states  that  have  ignored 
some  recommendations  of  indepen¬ 
dent  researchers,  like  Maryland  has. 

State  election  officials,  on  the 
other  hand,  say  they  are  confident 
that  appropriate  safeguards  are  in 
place  to  ensure  the  security  and  ac¬ 
curacy  of  the  2004  vote. 

Among  the  most  pressing  issues 
cited  by  critics  are  a  lack  of  techni¬ 
cal  standards  governing  DRE  soft¬ 
ware  development,  the  failure  of 


the  government  to  impose  trans¬ 
parency  on  the  software  testing  and 
certification  process,  and  the  lack 
of  technical  security  knowledge 
throughout  the  many  state  and  lo¬ 
cal  jurisdictions  that  oversee  elec¬ 
tions  where  DREs  will  be  used. 

Johns  Hopkins  University  pro¬ 
fessor  Aviel  Rubin,  who  last  year 
published  a  study  of  portions  of 
the  Diebold  software  code,  says 
the  quality  of  that  code  was  below 


minimum  standards  for  a  produc¬ 
tion  system.  Rubin’s  report  cites  a 
lack  of  industry-standard  change- 
control  processes  and  documenta¬ 
tion,  as  well  as  specific  technical 
weaknesses. 

Jonathan  Gossels,  founder  of 
SystemExperts  Corp.  in  Sudbury, 
Mass.,  says  his  review  of  the  Die¬ 
bold  code  showed  that  it  was  “ama¬ 
teurish”  in  its  design.  More  impor¬ 
tant,  the  amount  of  code  that  has 
been  studied  and  found  wanting  “is 
only  the  tip  of  the  iceberg”  of  the 
millions  of  lines  of  C++  and  Micro¬ 
soft  Windows-based  code  that 
powers  the  Diebold  touch-screen 
systems  and  back-end  management 
servers,  says  Gossels. 


1.  CALIFORNIA,  2003:  Diebold  installs  uncerti¬ 
fied  software  without  notifying  authorities. 

2.  CALIFORNIA,  2004:  State  Senate  committee 
passes  an  urgent  bill  to  ban  all  computerized 
voting  in  2004. 

3.  CALIFORNIA,  2004:  Secretary  of  state 
decertifies  Diebold  for  November  election. 

4.  ALAMEDA  COUNTY,  2004:  Diebold  control 
modules  fail  to  start  up. 

5.  ORANGE  COUNTY,  2004:  Hart  InterCivic  Inc 
DREs  trip  circuit  breaker  and  shut  down  when  bat¬ 
teries  die;  voters  are  turned  away  from  the  polls. 

6.  ORANGE  COUNTY,  2004:  Hart  access-code 
confusion  causes  7,000  voters  to  receive  the 
wrong  ballots. 

7.  SAN  DIEGO  COUNTY,  2004:  Diebold  DREs  lose 
votes;  control  modules  fail  to  start  up  properly. 

8.  BERNALILLO  COUNTY,  2002:  Insufficient 
memory  results  in  failure  to  count  12,000  of 
48,000  votes. 

9.  ARAPAHOE  COUNTY,  2004:  Failure  to  main¬ 
tain  DRE  battery  charge  results  in  expenditure 
of  more  than  $100,000  to  replace  batteries. 

10.  DALLAS  COUNTY,  2002:  Election  Systems 
and  Software  Inc.  (ES&S)  iVotronic  systems 
mark  incorrect  choices  on  voting  screens. 

11.  HARRIS  COUNTY,  2003:  Hart  DREs  don’t 
start;  voters  must  use  makeshift  paper  ballots. 

12.  HINDS  COUNTY,  2003:  DREs  overheat  and 


WHERE  E-V0TIN6  WENT  WR0N6 


break  down;  election  invalidated,  then  rsbeld. 

13.  INDIANA,  2004:  ES&S  installs  uncertified 
software  on  iVotronic  system  and  admits  the 
older,  certified  version  won’t  tabulate  votes. 

14.  FLOYD  AND  C0VETA  COUNTIES,  2002: 
Diebold  DREs  lock  up;  access  cards  malfunc¬ 
tion;  wrong  candidates  are  marked  on-screen. 

15.  BRYAN  AND  TERRELL  COUNTIES,  2002: 
Diebold  DRE  ballots  display  wrong  races 
and  omit  some  altogether. 

I 16.  MUSCOGEE  COUNTY,  2003:  DREs  rsgis 
ter  “yes"  when  voters  vote  “no. 
v  17.  GEORGIA,  2004:  Diebold  ballot  encoding 
mix-ups  prevent  voting  in  primary. 

18.  MONTGOMERY  COUNTY.  2004:  Diebold  DRF 
shows  incomplete  ballot  when  font  is 

19.  SARASOTA  COUNTY,  20C4:  ES&S  DRE;  f; 
to  count  189  votes. 

20.  WAKE  COUNTY.  2002:  ES&S 
ware  loses  436  ballets. 

21.  BROWARD  COUN  TY,  2002:  E53S  iVclromc 
error  results  in  failure  to  count  22%  of  tS*a  vc-ti 

22.  BROWARD  COUNT/,  2004:  ES&E 
134  votes;  margin  is  12  votes. 

23.  MIAMI-  DADE  COUNTY,  2002:  fcsISi  i< 
tronic  system  fails  to  count  8.2%  of  the  votes 

24.  MIAMI-OADE  COUNTY,  2004:  .Sew 
log  bug  in  ES&S  iVotronic  system  is  revealed; 
it  had  been  detected  nearly  a  year  earlier. 
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The  testing  procedures  of  vendors, 
particularly  Diebold,  are  also  under 
suspicion.  Jerry  Rudisin,  CEO  of  Agitar 
Software  Inc.,  a  software  testing  com¬ 
pany  in  Mountain  View,  Calif.,  says  he 
suspects  that  the  original  Diebold  code 
wasn’t  subjected  to  unit  testing  based 
on  the  lack  of  change-control  docu¬ 
mentation.  And  because  of  this,  “a  lot 
of  bugs  end  up  getting  through  to  the 
deployed  systems,”  he  says. 

A  January  2004  study  by  the  Innova¬ 
tive  Solutions  Cell  at  Columbia,  Md.- 
based  RABA  Technologies  LLC  tested 
Diebold  systems  that  were  to  be  de¬ 
ployed  for  Maryland’s  March  2004 
primaries.  The  study  found  the  general 
lack  of  security  awareness  in  the  Die¬ 
bold  code  “a  valid  and  troubling  reve¬ 
lation.”  In  addition,  the  report  con¬ 
firmed  Rubin’s  assertion  that  there  was 
little  evidence  that  widely  accepted 
standards  of  software  development 
had  been  followed. 

MYSTERY  TESTS 

One  of  the  most  critical  aspects  of  the 
voting  system  development  process  is 
the  testing  and  certification  of  hard¬ 
ware  and  software  to  ensure  that  they 
meet  voluntary  federal  voting  stan¬ 
dards  for  security  and  reliability.  Three 
vendors  act  as  so-called  independent 
testing  authorities  (ITA).  However,  IT 
experts  are  highly  critical  of  the  test¬ 
ing  process  because  of  its  secrecy. 

“Election  officials  are  buying  a  soft¬ 
ware  package,  and  there’s  not  a  lot  of 
transparency,”  says  Rudisin.  “With  vot¬ 
ing  software,  you  pretty  much  buy  a 
pig  in  a  poke.” 

Ciber  Inc.  in  Greenwood  Village, 
Colo.,  and  SysTest  Labs  LLC  in  Denver 
act  as  the  two  software  ITAs.  Wyle 
Laboratories  Inc.  in  El  Segundo,  Calif., 
is  the  hardware  ITA.  All  of  them  refuse 
to  provide  details  on  how  they  test  the 
voting  equipment  or  on  their  findings. 

“The  ITAs  that  test  these  machines 
are  hired  by  the  vendors,  so  they  are 
not  independent  and  not  neutral,”  says 
Rubin,  who  hasn’t  been  allowed  by 
Diebold  to  re-evaluate  the  source  code 
since  his  initial  study. 

Diebold  spokesman  David  Bear  says 
the  company  stands  behind  the  testing 
and  source  code  reviews  conducted  by 
“independent,  unbiased  third  parties.” 
The  reviews  are  done  at  the  federal 
level  using  standards  recommended  by 
the  Federal  Election  Commission  and 
at  the  state  level,  he  says. 

Bear  also  says  voting  systems  are 
only  a  small  part  of  the  election  proc¬ 
ess,  which  has  many  built-in  security 
precautions  and  redundancies.  “The 
voting  machines  are  completely  stand- 


With  voting 
software,  you 
pretty  much  buy  a 
pig  in  a  poke. 

JERRY  RUDISIN,  CEO,  AGITAR  SOFTWARE  INC. 

alone,”  he  says.  “No  network  connec¬ 
tion  of  any  kind  —  wired  or  wireless  — 
is  used  during  the  voting  process.  The 
only  connection  to  the  machine  at  the 
polling  place  is  the  AC  power  cord.” 

Eric  Lazarus,  president  of  New  York- 
based  DecisionSmith,  says  the  testing 
model  for  e-voting  systems  “is  broken.” 

Lazarus,  lead  author  of  a  report  by 
the  Brennan  Center  for  Justice  and  the 
Leadership  Conference  on  Civil  Rights 
on  improving  DRE  reliability,  says  2% 
of  systems  should  be  put  through  ex¬ 
haustive  testing  that  simulates  Election 
Day  activity.  The  testing  process  most 
states  use  is  based  simply  on  how  indi¬ 
vidual  machines  count  a  few  test  votes. 

SUPPORTING  AR6IMHTS 

Election  officials  for  Maryland,  Vir¬ 
ginia  and  California,  which  have  invest¬ 
ed  millions  of  dollars  in  Diebold  DRE 
systems,  say  they’re  confident  that  the 
voting  process  can  be  made  secure  and 
reliable  even  if  technical  vulnerabili¬ 
ties  exist  hidden  in  the  software. 

“We  will  not  overreact  to  scare- 
tactic  headlines  that  do  not  reflect  the 
long-established  security  protections 
required  by  law,  policy  and  procedure,” 
says  Jean  Jensen,  secretary  of  the  Vir¬ 
ginia  State  Board  of  Elections  (SBE), 
which  hired  Arlington,  Va.-based  CACI 
International  Inc.  to  conduct  an  inde¬ 
pendent  security  assessment  of  the 
Diebold  systems.  She  also  points  out 


that  few  of  the  e-voting  critics  “have 
presented  any  credentials  regarding 
their  expertise  in  election  law  or  the 
policies  and  procedures.” 

All  46  localities  in  Virginia  where 
DREs  from  six  vendors  will  be  used 
are  developing  security  policies  and 
procedures  based  on  the  CACI  recom¬ 
mendations,  and  those  procedures  will 
be  audited  during  the  election,  says 
Barbara  Cockrell,  spokeswoman  for 
the  IT  manager  at  the  Virginia  SBE. 

A  DRE  must  be  tested  in  an  actual 
election  before  it  can  be  sold  in  Vir¬ 
ginia,  says  Cockrell,  who  adds  that  log¬ 
ic  and  accuracy  tests  are  a  key  part  of 
the  certification  process  and  that  no 
system  touches  the  public  Internet. 

Linda  Lamone,  administrator  of  the 
Maryland  SBE,  criticizes  RABA’s  study 
of  DRE  use  in  Maryland,  saying  the  re¬ 
searchers  didn’t  “conduct  the  exercise 
in  a  polling-place  environment  under 
the  purview  of  trained  election  work¬ 
ers  . . .  and  bipartisan  election  judges 
observing  voters’  activities.” 

But  Michael  Wertheimer,  the  prima¬ 
ry  author  of  the  RABA  report,  says  he’s 
convinced  that  the  state’s  election  is  a 
disaster  waiting  to  happen.  “Despite 
our  recommendations,  Maryland  has 
decided  that  each  county  will  get  only 
one  password  to  protect  their  pre¬ 
cincts.  That  means  only  three  pass¬ 
words  protect  these  counties,”  he  says. 
“If  any  one  of  these  passwords  is  com¬ 
promised  and  exploited,  Maryland  is 
up  for  grabs.  All  it  takes  is  one  election 
official  to  allow  someone  five  minutes’ 
access  to  the  server  to  completely  rig 
the  election.” 

Not  quite,  says  Lamone.  First,  she 
says,  no  servers  are  located  at  polling 
places.  Second,  “neither  the  staff  at  the 
local  boards  of  elections  nor  the  elec¬ 
tion  judges  know  the  cryptographic 


keys  to  the  units  or  the  server  adminis¬ 
trative  passwords,”  she  says.  “The  al¬ 
phanumeric  keys  are  created  at  my  of¬ 
fice  and  are  only  known  to  people  on 
my  staff  who  need  to  know.”  Lamone 
adds  that  creating  keys  unique  to  each 
precinct  would  present  “a  logistical 
nightmare”  and  could  endanger  the  se¬ 
curity  and  efficiency  of  the  election. 

Wertheimer  remains  skeptical  about 
the  state’s  preparations  to  use  DREs. 
“Maryland  refuses  to  put  a  firewall  on 
servers  that  are  connected  via  dial-up 
modems,”  he  says.  “They  refuse  to  up¬ 
grade  the  Windows  2000  operating 
system  with  the  latest  security  patches 
—  they  were  16  patches  behind  in  Janu¬ 
ary  of  this  year.” 

Lamone  says  security  experts  hired 
by  the  state  determined  that  since  no 
component  of  the  voting  system  is 
connected  to  the  Internet,  the  firewall 
and  patches  recommended  by  RABA 
aren’t  necessary.  Moreover,  she  adds, 

“a  person  would  have  to  have  knowl¬ 
edge  of  the  encrypted  security  con¬ 
trols  in  place  for  sending  the  unofficial 
results  by  modem,  as  well  as  user  iden¬ 
tification  requirements  and  passwords, 
to  gain  access  to  the  server.” 

STILL  TIME? 

Lazarus  and  Gossels  say  there  is  still 
time  for  states  to  implement  proce¬ 
dures  that  can  lessen  the  likelihood  of 
malfunctions  and  malicious  activity 
and  have  jointly  devised  a  scorecard 
that  election  administrators  can  use  to 
rate  the  security  and  reliability  of  DRE 
systems  (see  box).  “The  best  that  we 
can  do  in  terms  of  security  at  this 
point  is  still  not  very  good,”  Lazarus 
says.  “But  there’s  no  excuse  for  not 
doing  some  of  the  easy  things.” 

The  bottom  line,  say  Gossels, 

Lazarus  and  Wertheimer,  is  that  there 
will  be  problems  with  DREs  next 
month,  ranging  from  malfunctions  that 
cause  polling  places  to  close  to  poten¬ 
tially  more  nefarious  incidents  of  tam¬ 
pering  that  nobody  is  able  to  detect. 

“I  am  worried  that  election  officials 
fail  to  recognize  that  elections  run  by 
computers  require  a  completely  differ¬ 
ent  model  than  those  run  by  paper,” 
says  Wertheimer.  “It  will  take  a  cata¬ 
strophic  voting  9/11  to  force  change.” 

©  49840 


MORE  ABOUT  E-VOTING 

Q&A:  Frank  Wiebe,  president  of  DRE  vendor  AccuPoll, 
talks  about  developing  and  testing  e-voting  systems: 

QuickLink  49839 

Raising  questions:  More  than  one  research  study  has 
found  flaws  in  e-voting  software  code  and  testing: 

QuickLink  49849 
www.computerworld.com 


ELECTION  OFFICIALS’  CHECKLIST 


The  following  measures  will  help  ensure 
the  security  of  e-voting,  say  Decision- 
Smith’s  Eric  Lazarus  and  System- 
Experts’  Jonathan  Gossels: 

■  All  machines  should  be  tested  using 
automatic  self-test  scripts  executed  on 
the  machines. 

■  Audio  and  other  accessibility  inter¬ 
faces  should  be  tested. 

*  All  ballot  positions  should  be  tested  in 
all  languages. 

■  Intensive  hand  testing  should  be  con' 
ducted  simulating  Election  Day  on  at 
least  2%  of  machines,  using  test  scripts 
that  include  casting  votes  for  every  can¬ 
didate  on  ballots  of  every  style. 

B  Audit  logs  from  voting  machines  and 


election  management  systems  should 
be  inspected  to  reconcile  the  number  of 
ballots  cast  with  the  votes  reported. 

B  Records  of  the  chain  of  custody  for 
voting  machines,  blank  ballots,  voted 
ballots  and  physical  copies  of  electronic 
records,  including  seal  numbers  and 
who  had  custody,  must  be  routinely 
subject  to  postelection  audit. 
b  Different  machines  must  have  their 
own  cryptographic  keys  and  passwords. 
b  Votes  and  vote  totals  sent  by  modem 
should  be  cryptographically  signed  to 
prevent  alteration  or  forgery, 
a  At  least  two  poll  workers  from  oppos¬ 
ing  parties  must  accompany  electronic 
or  paper  ballots  to  the  counting  facility. 
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VELOCITY 

PARTNER 


EMC  CLARiiON®  CHANGES  THE  WAY  YOU  THINK  ABOUT  STORAGE.  Frugality  is  the  mother  of  this 
invention.  Introducing  the  new  CLARiiON  CX  series.  The  storage  solution  that  offers  more  performance  at  every  „ 
level.  More  functionality.  And  more  networking  flexibility  for  SAN  or  NAS.  So  you  can  do  more  than  you  ever 
thought  possible.  At  a  price  you  thought  was  impossible.  CLARiiON  models  start  under  $10,000  and  grow 
with  you.  To  learn  more,  visit  www.EMC.com/growthcompanies.  Or  call  1-866-464-7381. 

Find  an  authorized  EMC  Velocity2  Partner  at  www.EMC.com/velocity. 
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IBM  Rolls  Out  Xeon 
Chips  in  Servers 

ISM  last  week  announced  five 
new  blade  servers  with  the  Xeon 
chip  that’s  capable  of  32-  and 
64-bit  x86  processing.  The  sys¬ 
tems  can  support  two  SCSI  drives 
internally.  A  chassis  will  fit  14 
SCSI-based  blades.  The  systems, 
with  processor  speeds  from  2.8 
to  3.6  GHz,  will  be  available  Nov. 
12,  starting  at  $2,039.  IBM  also 
detailed  an  eServer  blade  server 
with  a  2.2-GHz  Power  processor 
that  will  be  available  Oct.  29, 
starting  at  $2,699. 


Alcatel  Announces 
New  Switches 

Alcatel  announced  the  Alcatel 
OmniSwitch  6602  Layer  3  work¬ 
group  switch,  starting  at  $2,140; 
the  Alcatel  OmniSwitch  6600 
U24  fiber-to-desktop  switch, 
starting  at  $3,495;  and  power- 
over-Ethernet  capability  for  its 
OmniSwitch  6600  family,  starting 
at  $3,195.  They’re  available  now. 


SGI  Launches 
Linux  Workstations 

Silicon  Graphics  Inc.  has  an¬ 
nounced  its  new  Silicon  Graphics 
Prism  line  of  Linux-based  com¬ 
puters  for  users  who  require  ad¬ 
vanced  graphics  capabilities.  The 
machines  use  Intel  Itanium  2 
processors,  open  standards,  ATI 
graphics  accelerator  cards  and  a 
shared-memory  architecture,  said 
SGI.  Pricing  starts  at  $30,000. 


CA  Makes  Update 
To  Database  App 

Computer  Associates  Internation¬ 
al  Inc.  last  week  said  it  was  ship¬ 
ping  Release  11  of  its  Unicenter 
Database  Management  applica¬ 
tion  for  iBM’s  DB2  database  run¬ 
ning  on  the  z/OS  operating  sys¬ 
tem.  The  new  iteration  will  sup¬ 
port  Version  8  of  IBM’s  DB2  for 
z/OS,  and  its  enhancements  in¬ 
clude  improved  reliability  and 
faster  response  times,  according 
to  CA.  Pricing  wasn’t  disclosed. 


ROBERT  L.  MITCHELL 

The  Internet  Holds 
No  Secrets 


ONE  OF  MY  FIRST  JOBS  OUt  of  school  in 
the  early  ’80s  was  working  technical  sup¬ 
port  for  a  PC  clone  vendor.  It  was  there 
that  I  learned  firsthand  how  the  benefits 
of  information  technology  don’t  always 


trickle  down  to  workers  — 
or  the  customer. 

My  work  life  was  run  by 
a  PC  that  divvied  up  tech¬ 
nical  support  calls  and 
monitored  the  average  call 
time  and  the  quantity  of 
calls  I  completed.  Each 
morning  started  with  a  re¬ 
view  of  our  call  statistics 
and  the  day’s  call  quota. 

The  promise:  Those  who 
met  the  day’s  per-worker 
goal  could  leave  the  phones 
and  work  on  software  quality  assur¬ 
ance  testing  for  the  rest  of  the  day.  QA 
was  a  much  more  relaxing  and  desir¬ 
able  assignment.  If  a  worker  reached 
the  goal,  the  monitoring  PC  would 
beep  loudly,  and  the  person  whose 
name  appeared  on  the  display  would 
be  done  —  an  event  that  became 
known  as  “beeping  off.” 

In  my  six  months  there,  I  never 
beeped  off  before  5:30.  Eventually,  I 
came  to  realize  that  management  al¬ 
ready  had  a  full-time  QA  department 
but  was  always  short  on  technical 
support  staff.  So  it  became  very  good 
at  using  the  PC-based  statistical  analy¬ 
sis  tools  to  keep  that  carrot  just  out 
of  reach. 

The  worst  part,  though,  was  what 
the  vendor  did  to  its  customers.  While 
reviews  lauded  the  quality  of  its  ma¬ 
chines,  in  fact  the  system  BIOS  and 
graphics  subsystems  had  fatal  compat¬ 
ibility  problems  with  many  applica¬ 
tions.  Popular  business  programs  that 
reviewers  tested,  like  Lotus  1-2-3, 
worked.  But  many  others  did  not. 

Fixing  those  problems  meant  re¬ 
turning  the  PCs  under  warranty  —  an 


expense  that  management 
wanted  to  avoid.  So  we 
were  ordered  not  to  ac¬ 
knowledge  them.  When 
customers  called  in,  we 
dutifully  walked  them 
through  all  possible  solu¬ 
tions,  told  them  their  pro¬ 
gram  should  work  fine, 
documented  their  com¬ 
plaint  and  promised  to  let 
them  know  if  a  fix  became 
available.  This  is  why  my 
career  in  technical  support 
was  a  short  one,  but  to  this  day,  I’m 
amazed  that  those  problems  stayed  un¬ 
der  the  radar  despite  the  fact  that  we 
continued  to  ship  defective  machines. 

What  a  difference  20  years  makes. 
Today,  Internet  chat  rooms,  news- 
groups,  e-mail  lists  and  Web  sites 
would  be  buzzing  about  that  compa¬ 
ny’s  breach  of  trust  with  its  employees 
and  customers.  Online  communities 
would  have  quickly  identified  the 
company  as  an  undesirable  place  to 
work  and  dubbed  its  machines  lemons. 

Information  now  travels  so  fast  that 
companies  are  often  left  scrambling  to 
contain  the  damage  when  bad  news 
hits.  Kryptonite,  the  maker  of  bicycle 
locks,  was  the  latest  company  to  face 
that  challenge  after  word  spread  on 
the  Internet  last  month  that  many  of 
its  locks  could  be  picked  using  a  ball¬ 
point  pen.  The  Bic  revelation,  quickly 
picked  up  by  the  news  media,  dealt  a 
blow  to  the  company’s  brand  and 
forced  a  recall. 

Kryptonite  may  not  have  known 
about  the  flaw,  but  it  was  clearly  pe¬ 
nalized  for  failing  to  find  and  correct 
the  problem  before  the  public  did. 
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The  Internet  is  ruthlessly  efficient 
at  disseminating  information.  To  avoid 
such  disasters,  businesses  need  to  rig¬ 
orously,  iteratively  and  methodically 
test  their  products  for  all  possible  prob¬ 
lems  and  have  policies  to  ethically  and 
directly  respond  to  issues  in  real  time. 

But  the  destructive  power  of  the  In¬ 
ternet  hits  more  than  business.  In  the 
case  of  Kryptonite,  its  customers  may 
have  suffered  collateral  damage.  The 
rapid  release  online  of  detailed  in¬ 
structions  on  how  to  defeat  the  lock  — 
including  a  video  —  let  the  world 
know  how  to  steal  any  bicycle  secured 
with  this  popular  product. 

Is  it  right  that  such  information 
should  be  immediately  and  widely  dis¬ 
seminated,  no  matter  how  destructive 
or  who  might  get  hurt?  Microsoft 
would  say  no.  It  recently  criticized  a 
company  that  publicly  claimed  to  have 
identified  a  vulnerability  in  Word 
2000  without  first  giving  Microsoft  a 
chance  to  verify  the  problem  and  de¬ 
velop  a  patch  to  protect  its  customers. 

Microsoft’s  thinking  doesn’t  fly  with 
Daniel  Weitzner,  a  Kryptonite  lock 
user  and  occasional  Computerworld 
columnist  whose  bicycle  was  stolen 
prior  to  the  disclosure.  Had  he  known 
about  the  flaw  earlier,  he  might  still 
have  his  bicycle,  Weitzner  says. 

It’s  true  enough  that  such  disclo¬ 
sures  can  hurt  customers  who  don’t 
get  the  news  before  the  bad  guys  do. 
But  immediate  disclosure  also  empow¬ 
ers  users  to  protect  themselves. 

Whether  doing  so  is  right  or  wrong 
is  irrelevant  in  the  end,  since  the  Inter¬ 
net  doesn’t  make  such  distinctions, 
and  we  can’t  put  the  technology  genie 
back  in  the  bottle.  Rather  than  com¬ 
plain  about  the  situation,  both  cus¬ 
tomers  and  vendors  are  just  going  to 
have  to  adapt.  ©  49999 
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technical  competence:  yet  another  reason  to  outsource  with  spi 


Any  IT  project  can  get  off  to  a  great  start.  But  SPI  has  the  methodologies,  standards,  tools  and  technical 
savvy  to  deliver  successful  endings,  too.  Our  global  delivery  model  includes  CMMI  Level  5  (in  progress), 
Six  Sigma  and  ISO  9001:2000  certifications.  And  if  you  like  our  operational  capabilities,  you'll 
really  appreciate  our  grasp  of  your  industry,  and  how  closely  we  align  our  business  with  yours. 
To  learn  more,  contact  us  at  866-316-5774  or  sales@spiPortal.com.  Visit  us  at  www.spiPortal.com. 
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Ell S 1  >K1  Five  °f  Wall  Street’s  most  prestigious  financial  institutions  knew  exactly  what  they  wanted  from  an  enterprise 
solution.  More  productivity,  to  keep  up  with  an  ever-changing  global  market.  And  real-time  flexibility,  to  go  from 
32-  to  64-bit  applications  without  disrupting  their  business.  They  found  both  in  the  AMD  Opteron™  processor 
i  with  Direct  Connect  Architecture.  It  powers  the  world’s  highest  performing  x86  2-way  and  4-way  servers.  And 
it  helps  speed  up  millions  of  financial  transactions  every  day  in  trading  stations  and  server  farms.  At  AMD,  we  believe  it’s 
critical  that  technology  should  migrate  on  your  terms  to  help  you  realize  your  unique  vision.  It’s  one  of  the  reasons  why  HP, 
IBM  and  Sun  offer  enterprise-class  solutions  powered  by  AMD  Opteron  processors.  Would  you  like  to  learn  just  how  much 
of  a  difference  they  can  make  to  your  company?  Go  to  www.amd.com/enterprise 
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They  all  agreed  on  two  things:  Achieving  diversity 
isn’t  quick  or  easy,  and  it  requires  an  ongoing,  com¬ 
prehensive  commitment.  “Diversity  is  not  a  one-time 
event;  it  is  a  way  of  doing  business,  a  part  of  our  cul¬ 
ture,”  says  George  Hall,  senior  vice  president  of  in¬ 
formation  resources  human  resources  at  Bethesda, 
Md.-based  Marriott  International  Inc. 

“Diversity  is  a  business  strategy,”  says  Andy  Baker, 
senior  manager  of  human  resources  recruitment  and 
selection  at  The  Allstate  Corp.  in  Northbrook,  Ill. 
“Our  company  focuses  on  diversity  across  the  board, 
in  our  succession  management,  recruitment  and 
leadership  development.” 

With  that  overall  approach  as  the  context,  here  are 
some  of  the  innovative  tactics  diversity  leaders  use: 


DEDICATED  STAFF 

Nothing  says  commitment  like  having  human  re¬ 
sources  staff  dedicated  to  achieving  diversity  in  your 
workforce.  At  Bank  of  America  Corp.  in  Charlotte, 
N.C.,  Melissa  Thompson  is  vice  president  of  staffing 
diversity.  “I  was  hired  by  BOA  in  October  of  last  year 
to  focus  on  diversity  staffing,”  she  says.  “It’s  a  new 
role.  My  job  is  to  focus  on  finding  and  hiring  top  di¬ 
versity  talent  across  the  technology  space.” 

PIPELINE  RECRUITING 

It’s  hard  to  be  concerned  with  diversity  if  you’re 
scrambling  to  fill  holes  in  your  organization.  Know¬ 
ing  that,  committed  companies  have  learned  to  look 
ahead.  “We  try  to  anticipate  resource  needs  and  re¬ 
cruit  skills  in  a  proactive  way  rather  than  with  such 
urgency  that  we  can’t  pay  attention  to  the  demo¬ 
graphic  mix  of  our  population,”  says  Greg  Tahvonen, 
vice  president  for  human  resources  at  Delta  Technol¬ 
ogy  Inc.  in  Atlanta.  Looking  ahead  gives  the  Delta  Air 
Lines  Inc.  subsidiary  the  luxury  of  grooming  a  pipe¬ 
line  of  talented  minority  people.  “We  look  to  our  fu- 


UNLIKE  THE  WILD  HIRING  OF  THE  '90s, 
the  slow  rebuilding  of  bare-bones  IT 
shops  over  the  next  few  years  will 
provide  an  opportunity  to  staff  up 
thoughtfully.  It’s  another  chance  to 
get  diversity  right. 

Lots  of  IT  organizations  talk  about 
diversity,  but  some  are  better  at 
achieving  it  than  others.  We  spoke 
with  representatives  of  five  IT  groups  that  have  been 
repeatedly  cited  as  diversity  leaders  by  the  Black  Data 
Processing  Association  to  discover  how  companies 
can  find,  recruit  and  retain  top  minority  talent  in  IT. 


If  you’re  ready  to  really  commit  to  diversity  in  your  IT  shop, 
here’s  how  to  achieve  it.  By  Kathleen  Melymuka 
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ture  skill  needs,  and  we  look  at  developmental  pro¬ 
grams  such  as  student  intern  programs  to  be  sure  we 
have  the  right  mix  of  folks  in  the  queue  to  select 
from,”  he  explains.  Delta  also  makes  sure  it’s  training 
interns  for  the  jobs  it  will  need  to  fill  when  they’re 
ready  to  enter  the  workforce. 

RELATIONSHIP  RECRUITING 

Commitment  to  diversity  doesn’t  stop  when  hiring 
slows  down.  “When  the  supply  side  outstrips  the  de¬ 
mand  side,  it’s  extremely  important  to  continue  to 
maintain  relationships”  with  talented  minority  work¬ 
ers,  says  Hall.  To  do  that,  Marriott  relies  on  “relation¬ 
ship  recruiting”  he  explains.  “When  we  don’t  have 
the  demands,  our  associates,  including  our  manage¬ 
ment  team,  maintain  relationships  with  those  people 
we  would  otherwise  want  to  attract.” 

Relationship  recruiting  addresses  the  passive  job 
seekers  Hall  is  trying  to  connect  with.  “We’re  going  af¬ 
ter  the  top  5%  of  the  market,  and  many  of  those  aren’t 
actively  seeking  opportunities,  so  the  normal  chan¬ 
nels  don’t  reach  them,”  he  says. 

But  relationship  recruiting  does. 

For  example,  for  the  past  two 
years,  Hall  has  maintained  a  rela¬ 
tionship  with  “a  very  senior  indi¬ 
vidual  whom  we  would  love  to 
have”  but  for  whom  no  suitable 
opportunity  has  been  available. 

Hall  phones  the  person,  ex¬ 
changes  e-mails,  meets  for  coffee, 
reports  on  how  things  are  going 
—  stays  in  touch.  “So  if  an  oppor¬ 
tunity  does  open  up,  we  don’t 
have  to  re-establish  the  relation¬ 
ship,”  he  says.  “It  continues  to 
keep  our  name  out  in  front  of 
people’s  minds.” 

EXPLORATORY  INTERVIEWS 

Thompson  uses  what  she  calls 
exploratory  interviews  to  recruit 
top  minority  talent,  even  during  a 
hiring  slowdown.  “We  talk  to 
candidates,  even  though  there  is 
no  position  open,”  she  explains. 

The  exploratory  cycle  begins 
with  a  quarterly  resume  round¬ 
table,  where  managers  go  over 
the  resumes  of  candidates  Thompson  hopes  to  re¬ 
cruit,  even  though  no  specific  positions  may  be  open. 
They  tell  her  which  applicants  look  most  promising, 
and  she  calls  them  in  and  explains  the  situation.  “I  do 
some  coaching  so  they  understand  that  there  is  no 
opening,  but  if  they  sell  themselves,  anything  could 
happen,”  she  says. 

It  frequently  does.  “The  managers  often  say,  ‘Well  I 
was  going  to  hire  in  Q3,  but  since  you’re  sitting  here, 
I’ll  hire  you  now,’  ”  Thompson  says.  “We’ve  found  it 
gets  managers  thinking  outside  the  box.  The  more 
exploratory  interviews  we’ve  done,  the  more  suc¬ 
cesses  we’ve  seen.” 

TARGETED  RECRUITING 

Companies  committed  to  diversity  get  to  know  mi¬ 
nority  advocacy  groups.  Merck  and  Co.  participates 
in  the  Society  of  Hispanic  Professional  Engineers 


Inc.,  the  National  Society  of  Black  Engineers  and  the 
Black  Data  Processing  Association,  says  Michele  T. 
Ralph,  director  of  information  services  human  re¬ 
sources  in  Merck’s  Rahway,  N.J.,  office.  “We  attend 
conferences  and  do  a  lot  of  recruiting  there,”  she 
says.  She  also  maintains  relationships  with  historical¬ 
ly  black  colleges  and  universities  and  uses  Web  sites 
that  cater  to  minorities  for  recruiting. 

Successful  companies  also  tailor  their  messages  to 
their  markets.  “We  try  to  coordinate  our  approach 
with  the  target  audience,”  says  Baker.  That  includes 
using  specialized  ads  and  collateral  materials  that  are 
culturally  relevant  to  the  segments  to  which  he  is  ap¬ 
pealing,  he  explains. 

EMPLOYEE  REFERRAL 

Probably  the  strongest  single  means  of  recruiting  mi¬ 
norities  to  IT  is  through  other  minorities.  “Every  top 
talent  diversity  candidate  you  hire  will  bring  you  ad¬ 
ditional  top  talents,”  says  Thompson. 

Hall  agrees.  “We  have  found  that  talented  individ¬ 
uals  tend  to  associate  with  other 
talented  individuals,”  he  says. 
“Using  associate  referrals  is  a 
very  impactful  way  to  identify 
candidates.  We  use  it  to  the 
greatest  extent  possible.” 

Marriott  has  a  formal  referral 
program  with  cash  awards.  “So 
there  is  responsibility  all  across 
the  business  to  recruit,”  Hall  says. 

At  Allstate,  the  employee- 
referral  program  is  used  so  wide¬ 
ly  that  it’s  been  responsible  for 
the  recruiting  of  about  40%  of 
new  hires,  says  Baker.  Allstate 
also  has  a  strong  community 
presence.  “I  get  phone  calls  all 
the  time  from  employees  who 
say,  ‘My  church  is  hosting  an 
event.  Come  and  set  up  a  booth 
about  openings  at  Allstate,’  ” 
Baker  says. 

COMMUNITY  SERVICE 

Through  community  service, 
companies  can  do  good  while  at¬ 
tracting  potential  hires.  At  Mar¬ 
riott,  for  example,  employees  de¬ 
vote  one  workday  each  year  to  causes  such  as  Habi¬ 
tat  for  Humanity  International  Inc.,  Children’s  Mira¬ 
cle  Network  or  local  events  in  the  surrounding  com¬ 
munities.  “I’ve  done  everything  from  digging  fence 
posts  to  helping  to  refurbish  a  local  amusement 
park,”  Hall  says.  He  notices  that  interest  from  minor¬ 
ity  candidates  usually  increases  markedly  after  these 
activities. 

ACCOUNTABILITY 

Backing  up  diversity  talk  with  real  accountability 
makes  a  difference.  At  Bank  of  America,  diversity 
targets  are  an  integral  part  of  each  manager’s  perfor¬ 
mance  and  compensation  plan,  Thompson  says.  “We 
have  accountability  from  the  CEO  straight  down.” 

That  accountability  not  only  affects  the  decisions 
people  make  on  the  job,  she  says,  but  it  also  sends  a 
message  to  minority  candidates  that  the  company 


Diversity  Recruiting 


AISES.org  (American  Indian 
Science  and  Engineering  Society) 

AsianAvenue.com 

BDPA.org  (Black  Data 
Processing  Association) 

BlackPlanet.com 

CGSM.org  (Consortium  for 
Graduate  Study  in  Management) 

MiGente.com 

NSBE.org  (National  Society  of 
Black  Engineers) 

SHPE.org  (Society  of  Hispanic 
Professional  Engineers) 


Tips  from  the 

BORA 


Bp  Milt  Haynes,  immediate 
||  past  president  of  the 
9  Black  Data  Processing 
M  Association,  offers  three 
3  tips  for  recruiting  and 
Si  retaining  black  IT  talent: 


IThe  best  way  is  to  demonstrate 
a  commitment  to  diversity  in  the 
senior  management  ranks.  This  in¬ 
cludes  providing  employees  with  role 
models  who  are  visible  and  actively  involved 
in  community  outreach  programs  and  diver¬ 
sity  volunteer  initiatives. 


2  Recruit  through  historically  black 
colleges  and  universities,  and  asso¬ 
ciations  like  the  BDPA.  These  are 
the  best  places  to  find  highly  qualified 
African-American  candidates. 


3  Provide  competitive  salaries, 

attractive  fringe  benefits  and  open 
access  to  promotional  opportuni¬ 
ties.  Companies  that  retain  the  best- 
qualified  talent  over  time  understand  that  it’s 
very  important  to  do  this. 


means  what  it  says.  “Diversity  candidates  —  and  I 
was  one  —  love  knowing  you  have  that  accountability 
all  through  the  organization  right  to  the  top,”  she  says. 

The  same  is  true  at  Delta  Technology,  where  man¬ 
agers  are  measured  on  their  ability  to  create  and 
maintain  a  diverse  workforce,  says  Tahvonen.  “Our 
performance  standards  allow  an  objective  review  of 
performance,”  he  says. 

Progress  is  carefully  measured  at  Marriott,  says 
Hall.  For  example,  over  the  past  five  years,  his  IT  di¬ 
vision  has  increased  its  total  minority  representation 
by  more  than  5%,  although  the  size  of  the  division 
overall  has  decreased  by  14%.  “So  at  a  time  when  our 
head  count  has  gone  down,  our  minority  representa¬ 
tion  is  going  up,”  he  says.  During  that  period,  Mar¬ 
riott  increased  the  number  of  black  senior-level  tech 
associates  by  more  than  100%  and  promoted  seven  to 
director-level  positions,  he  says. 

Companies  say  that  once  they  begin  to  see  prog¬ 
ress  in  diversity,  others  notice,  and  then  it  snowballs. 
“External  recognition  helps,”  says  Baker.  “When 
we’re  named  a  top  company  for  diversity,  people  see 
that.”  Hall  agrees.  “Marriott  has  been  recognized  by 
organizations  like  BDPA,  and  that  helps  us  reach  po¬ 
tential  candidates.  Generally,  the  number  of  e-mails 
and  phone  calls  from  interested  candidates  will  in¬ 
crease  because  they  read  the  articles.”  ©  49738 
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JOIN  THE  ITIL 
REVOLUTION! 


Attend  this  event  and  we'll 
show  you  how  to  use  the 
best  practices  found  in  the 
Information  Technology 
Infrastructure  Library  (ITIL)  - 
the  world's  most  credible  IT 
service  management 
framework  -  to  "revolutionize 
your  IT  organization. 


February  6  -  9, 2005 


Orlando 
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But,  you  don't  have  to  take 
our  word  for  it.  Already 
tens  of  thousands  of  IT 
professionals  from  world 
class  organizations  have 
experienced  powerful  results! 
Now,  it's  your  turn! 

If  you're  new  to  ITIL  and  want 
to  learn  about  it,  contact  Pink 
Elephant  today. 


Exclusive  Keynote 


SIR  TIM  JSERNERS-LJI 

Inventor  of  the  World  Wide  Web 

Named  One  Of  Time  Magazine's  too 
Greatest  Minds  Of  The  20th  Century 


ARE  YOU  READY 
TO  CHANGE 
YOUR  IT  WORLD? 


Now  in  its  9th  successful 
year,  this  conference  features 
9  trades  with  over  80  sessions, 
including  more  case  studies 
than  ever  before. 


Pink  Elephant  is  a  world  leader 
in  ITIL  Education,  Consulting  and  Managed  Services 
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www.pinkelephant.com 
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National  Medical 
Taps  Masters,  Hall 

National  Medical  Health  Card 
Systems  Inc.  in  Port  Washington, 
N.Y.,  said  it  has  named  health 
care  industry  veteran  BILL  MAS¬ 
TERS  CIO.  Masters  will  oversee 
the  company’s  IT  infrastructure 
and  advance  its  use  of  IT  to 
streamline  acquisition  integration. 
Prior  to  joining  NMHC,  Masters 
was  vice  president  of  health  care 
business  solutions  at  CVS  Corp. 
He  has  also  held  senior  IT  posi¬ 
tions  at  Reliable  Drug  Stores  Inc., 
Rite  Aid  Corp.  and  Begley  Co.  The 
company  also  appointed  AGNES 
HALL  president  of  Integrail, 
NMHC’s  informatics  company, 
which  delivers  health  care  bene¬ 
fit/risk  management  software. 


N.Y.  Times  Names 
Thurm  Its  CIO 

The  New  York  Times  Co.  an¬ 
nounced  that  DAVID  A.  THURM, 
vice  president  for  real  estate  de¬ 
velopment,  has  been  named  CIO 
of  the  company  and  The  New 
York  Times  newspaper.  He  will 
report  to  Leonard  P.  Forman,  ex¬ 
ecutive  vice  president  and  chief 
financial  officer,  and  to  Scott 
Heekin-Canedy,  president  and 
general  manager  for  The  New 
York  Times.  Thurm  will  continue 
to  be  responsible  for  overseeing 
the  construction  and  develop¬ 
ment  of  the  company’s  new 
headquarters  in  Manhattan  and 
for  other  building  projects.  Previ¬ 
ously,  he  served  as  chief  operat¬ 
ing  officer  for  New  York  Times 
Digital. 


Christopherson  CTO 
At  Health  Language 

Health  Language  Inc.,  a  supplier 
of  medical  technology  in  Aurora, 
Colo.,  announced  that  JOHN 
CHRISTOPHERSON  has  been 
hired  as  chief  technology  officer. 
Prior  to  joining  HLI,  Christopher¬ 
son  was  vice  president  of  applica¬ 
tion  architecture  at  McKesson 
Provider  Technologies.  He  has  also 
served  as  vice  president  of  corpo¬ 
rate  systems  at  UnitedHealthcare. 


BARBARA  GOMOLSKI 

What  to  Tell 
The  Kids 


most  of  us:  The  job  market 
for  IT  professionals  isn’t 
what  it  used  to  be. 

Let  me  be  clear.  The 
tenor  of  that  recent  call 
with  my  colleagues  was  not 
totally  negative  toward  IT 
careers.  Many  of  the  peo¬ 
ple  on  the  call  said  they 
wouldn’t  discourage  their 
kids’  interest  in  IT.  These 
parents  would  strongly 
caution  their  children 
about  their  course  of  study, 
however.  They  would  ad¬ 
vise  their  kids  to  be  very 
clear  about  what  they  wanted  to  do  in 
IT  rather  than  just  assume  that  their 
computer  science  degrees  would  open 
all  doors. 

To  be  sure,  there  are  fewer  IT  posi¬ 
tions  available  today  than  there  were 
just  five  years  ago  if  we  consider  tradi¬ 
tional  IT  roles,  such  as  infrastructure 
management,  support  and  program¬ 
ming.  What’s  more,  the  jobs  that  are 
available  in  IT  increasingly  require 
skills  that  aren’t  taught  as  part  of  the 
computer  science  curriculum.  This 
is  in  stark  contrast  to  when  I  graduat¬ 
ed  from  college.  All  the  computer 
science  majors  I  knew  had  secured 
high-paying  jobs  at  Fortune  100  firms 
prior  to  graduation. 

But  the  changes  in  the  IT  job  market 
affect  all  IT  professionals,  not  just 


those  new  to  the  field.  So, 
what  are  the  chief  differ¬ 
ences  today?  Here’s  how  I 
see  it: 

■  The  days  of  studying 
computer  science,  getting 
an  entry-level  job  as  a  pro¬ 
grammer  and  moving  up 
the  IT  ladder  are  gone. 

First  of  all,  there  are  fewer 
programming  jobs  avail¬ 
able  now,  because  of  off¬ 
shore  outsourcing. 

Second,  we  can  no 
longer  assume  that  a  gener¬ 
al  computer  science  degree 
is  going  to  prepare  graduates  for  the  IT 
job  market.  Certainly,  some  firms  are 
still  hiring  new  talent  through  the  pro¬ 
gramming  ranks,  but  this  process  is 
not  nearly  as  common  as  it  used  to  be. 

■  As  a  result  of  automation  and  the 
spread  of  consumer  IT,  we  don’t  need 
as  many  people  as  we  once  did  to 
manage  IT  systems.  Technology  is 
more  standardized,  and  end  users  are 
more  familiar  with  technology. 

■  The  increasing  pace  of  business, 
industry  consolidation  and  globaliza¬ 
tion  means  that  most  of  us  will  move 
from  company  to  company  during  our 
careers.  All  professionals  —  not  just 
those  in  IT  —  will  gather  the  skills 
they  need  from  multiple  employers. 

The  IT  job  market  is  not  all  bad 
news,  though.  There  are  opportunities 


in  certain  areas,  and  even  growth. 

Here  are  some  of  them: 

Business  process  design  and  management. 
Business  process  design  —  something 
IT  has  always  been  expert  at  —  is 
starting  to  surface  as  a  new  competen¬ 
cy  for  IT  professionals.  Their  prowess 
at  process  design  comes  from  getting 
to  see  entire  business  processes  as 
they  build  IT  systems.  Enterprising  IT 
professionals  are  capitalizing  on  this 
by  driving  process  improvement  in 
their  own  organizations  and  making 
process  design  and  management  a  key 
part  of  their  jobs. 

Information  management.  Companies  are 
generating  more  and  more  data  about 
their  customers,  partners  and  com¬ 
petitors.  Organizations  are  going  to 
need  individuals  who  can  help  turn 
this  data  into  usable  information.  This 
includes  experts  in  customer  relation¬ 
ship  management,  business  intelli¬ 
gence  and  search  technologies. 

Relationship  and  vendor  management.  As 
the  multisourced  IT  environment  has 
gained  ground,  it  has  become  clear 
that  IT  organizations  need  people  who 
can  negotiate  and  manage  contracts 
and  who  can  help  select  and  manage 
IT  service  provider  partners. 

Finally,  traditional  IT  jobs  (such  as 
programming  and  infrastructure  man¬ 
agement)  are  not  going  away.  Though 
there  may  be  fewer  of  them,  we’ll  still 
need  people  in  these  positions  for  the 
foreseeable  future. 

The  IT  job  market  is  changing,  and 
it  can  appear  bleak.  But  I’m  actually 
pretty  optimistic  about  the  prospects 
for  IT-sawy  professionals.  However, 
future  IT  job  seekers  will  need  to  do 
more  than  study  computer  science  at  a 
reputable  college  to  succeed.  ©  49732 
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A  GROUP  OF  COLLEAGUES  and  I  were 

talking  during  a  conference  call  the  other 
day  about  the  IT  job  market.  Many  of  us 
have  kids  who  are  starting  to  think  about 
colleges  and  professions.  Someone  asked 
the  group,  “Would  you  advise  your  kid  to  go  into  IT  to¬ 
day?”  The  majority  of  people  on  the  call  said  no.  This  is 
just  anecdotal  evidence  of  what  is  blatantly  obvious  to 


BARBARA  S0M0LSKI,  a 

former  Computerworld 
reporter,  is  a  vice  presi¬ 
dent  at  Gartner  Inc., 
where  she  focuses  on 
IT  financial  management 
Contact  her  at 
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Thrifty  Storage  Strategies 

To  maximize  storage  savings, 
Glenn  Exline  and  other  IT  pros 
are  homing  in  on  long-term 
planning  initiatives.  PAGE  36 


Secondhand 
Savings 

Buying  used  storage  equipment  is 
cheaper  than  buying  new.  But  there 
are  risks  involved.  PAGE  40 
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Long  Live  Tape 

Columnist  Mark  Hall  was  planning  to  write 
about  the  impending  demise  of  tape.  But 
then  he  looked  a  bit  closer  and  discovered 
that  it  has  a  bright  future.  PAGE  46 


EDITOR’S  NOTE 


LET’S  TAKE  IT  BY  THE  NUMBERS:  When  Sage 

Research  asked  104  executives  which  tech¬ 
nology  areas  are  the  greatest  sources  of  pain 
in  their  organizations,  they  ranked  security 
No.  1  (no  surprise  there)  and  storage  No.  2. 

Why  is  storage  so  painful?  Maybe  it’s  because  stor¬ 
age  demand  is  doubling  every  year  and  IT 
budgets  certainly  aren’t.  An  IDC  study  says 
the  demand  is  fueled  by  growth  in  e-mail, 
data  warehousing  and  CRM,  not  to  mention 
regulatory  requirements.  The  effort  to 
archive  boatloads  of  e-mail  (with  those  giant 
attachments)  is  especially  costly:  The  Yan¬ 
kee  Group  says  a  typical  corporation  with 
5,000  employees  will  accumulate  nearly  4TB 
of  e-mail  every  year,  thus  requiring  the  services  of  at 
least  one  full-time  storage  administrator! 

This  helps  to  explain  why,  in  an  exclusive  survey 
of  91  IT  executives,  Computerworld  found  that  the 
top  three  storage  headaches  are  data  growth,  cost 


and  insufficient  staffing.  This  special  report  tackles 
the  issue  in  the  middle  —  cost  —  by  identifying 
thrifty  strategies  for  the  storage  manager,  from 
big-picture,  long-term  plans  that  reduce  the  total 
cost  of  ownership  to  short-term  ideas  like  buying 
secondhand  gear. 

Our  survey  also  found  that  the  top- 
of-mind  storage  topics  for  the  next  few 
months  are  disaster  recovery  and  storage 
security,  which  means  we’ve 
come  full  circle:  Security 
and  storage  are  the  top  tech¬ 
nology  issues  in  the  IT  field 
today,  no  question  about  it. 

©  49814 


i  Mitch  Betts  is  Computer- 
|  world’s  executive  editor. 

Contact  him  at  mitch_betts 
I  @computerworld.  com. 


KNOWLEDGE 
CENTERS  ONLINE 

For  storage  news  and 
analysis,  visit  our  Storage 
Knowledge  Center: 

OQuickLink 
k1700 

computerworld.com 


Stretching 

Your  Storage 

Dollars 


Cost-effective  strategies 
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There  are  dozens  of  ways 
you  can  shave  a  little  here 
and  a  little  there  when  it 
comes  to  overall  storage 
costs.  But  at  the  end  of  the 
day,  storage  is  still  going  to 
be  a  whopping  part  of  you  budget. 
That’s  why  companies  that  are  serious 
about  real  savings  take  a  long-term 
strategic  view  and  push  their  plans 
through  to  completion. 

Take  the  case  of  Cisco  Systems  Inc. 
Utilization  of  just  20%  to  30%  on  a  di¬ 
rect-attached  storage  architecture  was 
costing  a  fortune.  “With  no  accurate 
method  for  tracking  consumption  and 
no  way  to  plan  for  growth,  our  storage 
spending  grew  out  of  hand  between 
2000  and  2002,”  says  Bill  Williams, 


manager  of  enterprise  storage  opera¬ 
tions.  “That’s  why  we  decided  to  focus 
on  achieving  a  consolidated  storage 
model  to  raise  utilization  levels  and 
lower  TCO.” 

In  a  relatively  short  time,  the  compa¬ 
ny  has  taken  major  strides  toward 
achieving  that  goal.  In  2001,  Cisco’s 
750TB  of  data  was  almost  all  direct- 
attached  storage,  with  a  few  storage- 
area  network  islands  interspersed. 
Today,  Cisco  has  2.1  petabytes  of  man¬ 
aged  data,  but  only  20%  of  that  is  di¬ 
rect-attached  storage;  55%  is  on  a  Fibre 
Channel  SAN,  and  25%  is  network- 
attached  storage.  This  shift  involved 
migrating  nearly  1  petabyte  of  data  to 
Cisco’s  MDS  9500  Series  Multilayer 
Directors  and  consolidating  80  smaller 


Long-term 
planning  is 
the  ticket  to 
big  savings. 

By  Drew  Robb 


EMC  Corp.  frames  to  eight  large  ones. 

Cisco’s  experience  is  far  from  un¬ 
common.  Escalating  storage  costs 
are  pushing  most  companies  to  look 
for  cost-saving  and  -avoidance  strate¬ 
gies.  While  some  save  cents  here  and 
there  on  quick  fixes,  the  real  savings 
come  through  long-term  planning. 
Large  organizations,  in  particular,  are 
finding  that  the  sheer  volume  of  data 
that  exists  in  disparate  systems  neces¬ 
sitates  the  rearchitecting  of  the  storage 
infrastructure. 

Taking  the  Long  View 

By  consolidating  storage  and  migrating 
to  networked  storage,  Cisco  has  taken 
annual  total  cost  of  ownership  from  40 
cents  per  megabyte  to  10  cents  per 
megabyte,  says  Williams.  And  there 
may  still  be  room  for  improvement. 
Cisco  has  a  target  of  8  cents  per 
megabyte  this  year. 

Other  organizations  are  taking  a 
similarly  long-range  view  to  slash  their 
storage  budgets.  The  45th  Space  Wing 
of  the  U.S.  Air  Force,  for  example,  ex¬ 
perienced  problems  with  its  direct- 
attached  storage  architecture.  Backups 
were  slow,  systems  took  too  long  to  re¬ 
cover,  and  performance  suffered  badly. 

The  45th  Space  Wing  has  spent  the 
past  several  years  implementing  a  cen¬ 
tralized  storage  environment  consist¬ 
ing  of  BrightStor  Enterprise  Backup 
software  from  Computer  Associates 
International  Inc.  and  storage  hard¬ 
ware  from  Brocade  Communications 
Systems  Inc.,  EMC  and  Exabyte  Corp. 
By  pooling  storage  in  large  reposito¬ 
ries,  capacity  increased  by  600%  to 
6.5TB,  file  and  print  servers  were 
reduced  by  33%,  and  backup  times 
decreased  by  83%. 

“From  12  hours  per  night  for  backup, 
we  are  down  to  four  hours,”  says  Glenn 
Exline,  manager  of  advanced  technolo¬ 
gy  at  Patrick  Air  Force  Base.  The  eco¬ 
nomic  payoff  has  been  impressive. 

The  costs  to  date  have  totaled  about 
$1.4  million,  he  says,  while  the  savings 
are  about  $2  million. 

To  prevent  storage  costs  from  mush¬ 
rooming,  Exline  stresses  understand¬ 
ing  the  specific  SAN  design.  Almost  all 
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Introduction 


The  Grand  Challenges 

A  recent  SURVEY  OF  104  executives  fingered  IT  securi¬ 
ty  as  the  No.l  technology  pain  point  in  corporations. 
Why?  For  one  thing,  the  threats  come  in  many  forms 
and  from  many  directions:  disgruntled  employees, 
fired  employees,  clueless  employees  who  succumb  to  social  en¬ 
gineering,  passwords  left  on  Post-it  notes,  wide-open  instant 
messaging  and  increasingly  powerful  hacker  tools  in  the  hands 
of  teenagers. 


“Companies  must  understand  that 
the  corporate  perimeter  dissolved 
with  the  very  first  Internet  connec¬ 
tion,”  says  Lynne  Ellyn,  lead  author  of 
a  security  report  from  Cutter  Consor¬ 
tium  in  Arlington,  Mass.  “Every  busi- 
ness-to-business  supply  chain  con¬ 
nection,  every  Internet  storefront, 
every  reverse  auction  that  a  company 
puts  into  operation  opens  the  corpo¬ 
ration’s  virtual  doors.  Once  connect¬ 
ed  to  the  World  Wide  Web  or  the  In¬ 
ternet,  a  company  actively  occupies  a 
virtual  space  that  is  peopled  with  com¬ 
petitors,  terrorists,  children,  environ¬ 
mentalists,  lawyers  —  every  segment 
of  society  —  or,  actually,  every  seg¬ 
ment  of  nearly  every  society  on  earth.” 

New  security  and  privacy  laws  are 
being  passed,  and  the  risk  of  cyberter¬ 
rorism  looms.  Plus  there  are  seeming¬ 
ly  mundane  issues:  The  telecommuter 
working  at  his  kitchen  table  from  a 
home  PC  —  connected  to  your  corpo¬ 
rate  network  —  could  be  the  weakest 
link  in  your  security  defenses.  “We 
got  hit  with  the  Blaster  worm  when  a 
home  user  tapped  into  a  machine  he 
didn’t  really  require  access  to,”  says 
Rich  Dase,  technology  director  at 
Knowles  Electronics  LLC  in  Itasca,  Ill. 

It’s  no  wonder  that  some  compa¬ 
nies  throw  up  their  hands  and  let  con¬ 
tractors  that  have  security  expertise 
—  known  as  managed  security  serv¬ 
ice  providers  —  handle  the  work.  The 
threats  are  “outpacing  the  enterprise’s 
ability  to  keep  up  with  the  latest 
countermeasures  and  techniques  to 
thwart  attacks,”  according  to  a  recent 


report  by  The  Yankee  Group.  The  re¬ 
searchers  predict  that  enterprises  will 
outsource  90%  of  their  security  activ¬ 
ities  by  2010. 

But  the  outsourcing  approach  is  no 
panacea  —  it  has  it’s  own  challenges. 
And  many  corporations  don’t  want  to 
turn  the  keys  to  the  castle  over  to  an 
outside  firm.  “You  cannot  outsource 
risk.  You  should  never  outsource 
everything,”  says  Yankee  Group  ana¬ 
lyst  Eric  Ogren. 

Insider  Threats 

One  of  the  biggest  security  threats 
comes  from  inside  the  organization. 
According  to  the  American  Society 
for  Industrial  Security,  current  and 
former  employees  and  on-site  con¬ 
tractors  with  authorized  access  to  fa¬ 
cilities  and  networks  continue  to  pose 
the  most  significant  risk  to  intellectu¬ 
al  property  such  as  research  data,  cus¬ 
tomer  files  and  financial  information. 

It’s  especially  important  to  lock 


Pain  Points 

Which  technology  areas  are  the 
greatest  sources  of  pain  in  your 
organization  today? 

1.  Security 

2.  Storage 

3.  Software  license  management 

BASE:  104  C-LEVEL  EXECUTIVES  AT 
U  S  BUSINESSES  WITH  MORE  THAN 
lOO  EMPLOYEES 
SOURCE.  SAGE  RESEARCH  INC., 

NATICK,  MASS.,  JUNE  2004 


down  security  during  a  merger.  U.S.- 
based  multinational  companies  plan 
to  increase  their  merger  and  acquisi¬ 
tion  activity  over  the  next  two  years, 
with  70%  expecting  to  be  involved  in 
such  deals  in  that  period,  according  to 
a  recent  PricewaterhouseCoopers 
Barometer  Survey  of  170  executives. 
That  will  mean  a  lot  more  work  for 
chief  security  officers  —  before  the 
deal  is  signed  and  afterward,  when  se¬ 
curity  technologies  and  policies  have 
to  be  integrated.  You’ll  need  to  ensure 
that  data,  networks  and  systems  re¬ 
main  as  secure  as  possible  during  the 
often  turbulent  times  that  accompany 
a  merger  or  acquisition. 

For  example,  you’ll  need  to  analyze 
the  security  policies  and  technologies 
at  the  other  company  and  determine 
how  vulnerable  it  is  —  well  before  the 
actual  merger.  “Spend  a  lot  of  time 
learning  about  the  company  and  its 
culture,  where  it  does  business, 
whether  security  [management]  is 
centralized  or  decentralized,  and  how 
the  company  values  security,”  says 
Bobby  Gillham,  manager  of  global 
security  at  ConocoPhillips  in  Hous¬ 
ton,  who  headed  security  for  Conoco 
during  its  2002  merger  with  Phillips 
Petroleum. 

And  you’ll  need  to  anticipate  social 
engineering  and  other  security  threats 
from  disgruntled  employees  at  both 
of  the  companies  involved.  As  soon 
as  an  employee  has  been  notified 
about  a  layoff,  cut  off  access  to  all 
critical  services  and  applications. 

“You  need  to  pay  particular  attention 
to  protecting  against  people  walking 
out  with  proprietary  information,” 
Gillham  says. 

Hole  in  the  Firewall 

Meanwhile,  knowledge  workers  are 
using  consumer-oriented  instant 
messaging  applications,  opening  up 
your  network  to  more  possible  mis¬ 
chief.  Gartner  Inc.  has  identified  IM 
as  one  of  the  top  11  security  issues  for 
the  corporation.  “IM,  by  its  very  na¬ 
ture,  punches  a  hole  in  the  firewall, 
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Advice  from  Your  Peers 


A  sampling  of  the  practical  tips 
you’ll  find  in  this  report: 

ENFORCE  a  “lowest  privilege  level”  pol¬ 
icy  for  information  assets,  which  means 
employees  get  access  only  to  the  data 
they  need  to  do  their  jobs.  No  one  needs 
access  to  everything. 

CHANGE  systems  administrator  pass¬ 
words  when  key  IT  staff  members  leave 
the  company. 

SET  a  time  limit  -  like  15  minutes  -  for 
responses  from  security  services  firms. 


ANTICIPATE  social  engineering  and 
other  security  threats  from  disgruntled 
employees  at  both  of  the  companies 
involved  in  a  merger. 

BLOCK  file  transfers  for  users  of  con¬ 
sumer  instant  messaging. 

HIRE  trained  investigators  for  computer 
crime  cases.  Even  great  in-house  sys¬ 
tems  administrators  can  unwittingly  foul 
up  the  evidence  needed  for  prosecution. 

MINGLE  with  the  opposition  at  the  an¬ 
nual  Def  Con  hacker  conference  in  Las 
Vegas  to  find  out  what  they’re  up  to  now. 


and  that  opens  up  the  possibility  of 
inviting  in  a  dangerous  worm,”  says 
Internet  security  expert  Douglas 
Schweitzer. 

Battling  this  onslaught  of  security 
problems  will  require  not  only  savvy 
but  also  money.  “Back  in  the  good  old 
days,  security  consisted  of  a  few  fire¬ 
walls  and  some  virus  protection,” 


says  veteran  CIO  Doug  Lewis.  “The 
threats  have  outgrown  those  simple 
defenses,  and  the  cost  has  outgrown 
the  approval  level  of  the  chief  securi¬ 
ty  officer  and,  sometimes,  that  of  the 
CIO.”  That  means  Fortune  500  com¬ 
panies  are  finding  themselves  with 
security  expenditures  that  require 
CEO  and  even  board-level  approvals. 


Boosting  Your  Budget 

In  this  report,  Lewis  provides  a 
brilliant  plan  for  developing  a  rock- 
solid  business  case  for  boosting 
your  IT  security  budget  —  with  a 
credible  return  on  investment  that 
even  the  chief  financial  officer 
will  love. 

Overall,  the  report  has  dozens  of 
practical  tips  to  help  you  manage  the 
IT  risks  faced  by  the  modern  corpo¬ 
ration.  But  before  you  implement  any 
of  them  or  buy  another  security  prod¬ 
uct,  do  one  thing:  Stop  to  identify  the 
three  biggest  security  risks  your  com¬ 
pany  faces  —  whatever  would  bring 
your  company  to  its  knees.  They  will 
vary,  depending  on  your  industry  and 
business  model.  Is  it  theft  of  credit 
card  numbers?  Embezzlement?  Priva¬ 
cy  violations? 

Be  sure  to  address  those  high-risk 
areas  first,  before  looking  at  more  ex¬ 
otic  problems.  Take  care  of  the  ba¬ 
sics:  passwords,  patches,  employee 
training,  antivirus  software  and  ac¬ 
cess  controls.  And  if  you  can’t  keep 
up,  consider  outsourcing. 


Risk  -  it’s  everywhere.  And  no  one  knows  that  better 
than  IT  security  professionals.  Disgruntled  employees, 
fired  employees,  clueless  employees  who  succumb  to 
social  engineering,  passwords  left  on  Post-it  notes, 
wide-open  instant  messaging  and  increasingly  powerful 
hacker  tools  in  the  hands  of  teenagers  -  this  bulletin 
will  help  you  address  those  risks  with  sage  advice  for 
protecting  corporate  assets  in  a  dangerous  world. 

FREE  DOWNLOAD:  “Our  Hottest  Security  Tips” 

For  a  limited  time,  get  this  full  report  (a  $49.95 
value)  for  free,  compliments  of  Cisco. 
www.computerworld.com/securitytipsbulletin 
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The  more  freedom  you  give  employees  to  work  anywhere,  the  more  you  can  achieve.  That's  good.  But,  at  the  same  time,  the  more  you  expose 
yourself  to  intruders  and  worms.  That's  not  so  good.  How  far  can  a  network  travel  to  protect  your  office?  Now,  the  answer  is  everywhere.  Cisco 
networks,  with  integrated  wireless  security,  protect  mobile  workers  who  constantly  move  outside  the  safety  of  the  corporate  network.  So 
information  is  secured.  No  matter  where  it  exists.  To  learn  more  about  how  Cisco  can  help  plan,  design  and  implement  your  network  security, 
visit  cisco.com/securitynow.  SELF-DEFENDING  NETWORKS  PROTECT  AGAINST  HUMAN  NATURE. 
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Penny-Pinching  Tips 


INTRODUCE  simple  file/print  and  Web 
applications  to  Linux,  gain  some  expe¬ 
rience,  and  then  gradually  execute  a 
small-scale  Linux  SAN. 

INVESTIGATE  archiving  systems  to 
take  inactive  data  off  production  sys¬ 
tems  to  eliminate  as  much  as  60%  of 
your  nightly  backup  workload. 

JOIN  a  strong  user  organization  such 
as  the  Association  of  Storage  Network¬ 
ing  Users  (www.asnp.org)  and  find  out 
how  to  reduce  your  storage  costs  by 
networking  with  your  peers. 

TRAIN  everyone  in  storage  a  little 
every  month.  That  can  bring  down  your 
support  costs  considerably. 

REQUEST  proposals  only  for  what  you 
need  and  stick  to  it.  Don’t  be  swayed  by 
the  latest  vendor  bells  and  whistles. 
Often,  they  are  the  equivalent  of  a  car 
salesman  talking  you  into  an  extra 


S100  a  month  for  a  better  CD  player,  an 
extra  cup  holder  and  a  sunroof.  Do  you 
really  need  them? 

SCHEDULE  defragmentation  before 
servers  are  backed  up.  It’s  a  great  way 
to  speed  backups  and  reduce  costs.  But 
don’t  use  the  built-in  tool  that  comes 
with  Windows.  Get  a  networkable  de¬ 
fragmenter  such  as  Executive  Soft¬ 
ware  International  Inc.’s  Diskeeper. 

!  WRITE  requests  for  proposals  that  are 
neither  too  general  nor  too  specific. 

Too  specific  and  costs  can  mount.  Too 
general  and  you  end  up  with  software 
that  doesn’t  fit  your  needs  or  that  lacks 
business  value. 

DECIDE  if  you  actually  have  the  time, 
expertise  and  resources  to  competent¬ 
ly  evaluate  vendors  or  implement  stor¬ 
age  projects.  If  not,  farm  it  out  to  in¬ 
dustry  experts. 

-Drew  Robb 


storage  vendors  have  multiple  tiers  of 
products.  “By  understanding  your  re¬ 
quirements,  you  can  balance  perfor¬ 
mance,  cost  and  future  growth,”  says 
Exline.  “That  way,  you  avoid  buying 
an  ICBM  when  all  you  needed  was  a 
fly  swatter.” 

A  case  in  point:  The  smaller  EMC 
Clariion  array  proved  a  better  fit  than 
EMC’s  high-end  Symmetrix  array. 
“There  are  lots  of  situations  that  call 
for  larger  systems,  but  they  were 
overkill  in  our  case,”  says  Exline. 

Surviving  the  Learning  Curve 

Choosing  a  system  is  a  decision  that 
can  be  made  only  after  you  do  your 
homework.  In  reality,  however,  that 
may  not  be  possible  until  you  have 
completed  your  first  SAN.  And  by 
then,  it  may  be  too  late. 

“Any  enterprise  must  get  a  qualified 
VAR/integrator  involved,  as  there  is 
nothing  like  experience  when  it  comes 
to  SANs,”  says  Steve  Duplessie,  an 


analyst  at  Enterprise  Strategy  Group 
Inc.  in  Milford,  Mass.  “There  can  be  a 
ton  of  gotchas  if  you  aren’t  prepared 
upfront.” 

Exline  agrees.  He’s  seen  IT  depart¬ 
ments  attempt  huge  storage  projects 
with  impossible  deadlines.  There  is  a 
learning  curve  that  has  to  be  respected, 
he  says,  and  he  preaches  training  on 
new  storage  products.  “By  being  self- 
sufficient  to  a  large  degree,  we  save  a 
lot  on  support,”  says  Exline. 

Another  way  to  reduce  costs  is 
through  consolidation.  Golden  Gate 
University  in  San  Francisco  is  nearing 
the  end  of  a  three-year  migration  of  its 
storage  environment  from  six  operat¬ 
ing  systems  to  Linux  and  Windows. 
The  university  is  also  consolidating 
servers,  databases  and  enterprise  re¬ 
source  planning  systems. 

“Leveraging  Linux  with  an  enter¬ 
prise  storage  tier  has  reduced  server 
acquisition  costs  by  over  20%, ”  says 
Keith  Rajecki,  Golden  Gate  Universi¬ 


ty’s  IT  infrastructure  manager.  “TCO 
in  our  old  storage  environment  was  10 
times  greater  than  it  is  today.” 

He  reports  that  maintenance  would 
have  cost  250%  more  on  a  Sun  Solaris 
environment  than  it  does  on  a  Dell/ 
Linux  combination.  IT  operating  costs 
are  down  40%,  the  number  of  servers 
has  been  cut  from  100  to  about  50,  and 
head  count  is  20%  lower. 

“Consolidation  and  standardization 
combined  with  a  focus  on  storage 
management  as  an  ongoing  activity 
will  enable  most  organizations  to  cut 
storage  costs,”  says  Rajecki. 

No  End  in  Sight 

Simple  economics  dictates  planning 
for  the  long  haul.  Cisco,  for  instance, 
recently  consolidated  its  storage  bud¬ 
get  across  all  business  units  and  has  a 
single  budget  for  all  enterprise  storage 
needs.  “Because  storage  is  such  a  ma¬ 
jor  cost,  it  requires  long-term  planning 
to  keep  costs  under  control,”  says  Cis¬ 
co’s  Williams. 

Similarly,  the  45th  Space  Wing  is  re¬ 
fusing  to  rest  on  its  storage  laurels.  It 
implemented  backup  to  virtual  tape 
via  Alacritus  Software’s  Securitus  vir¬ 
tual  tape  appliances.  It  also  added  an¬ 
other  28TB  of  mixed  Fibre  Channel 
and  ATA  storage  to  support  Exchange 
2003  clusters,  virtual  tape  backup  and 
cross-site  mirroring  (using  EMC’s 
SnapView  and  SAN  Copy).  New  tape 
libraries  from  Qualstar  Corp.  were 
added  using  Super  Advanced  Intelli¬ 
gent  Tape  technology  to  increase  per- 
tape  density  and  reduce  off-site  vault¬ 
ing  charges. 

“Estimated  ROI  is  14  months,  with  a 
three-year  savings  of  approximately 
$400,000  just  in  tape  and  vaulting 
charges,”  says  Exline.  ©  49416 


Robb  is  a  freelance  writer  in  Los  Angeles. 
Contact  him  at  drewrobb@attbi.com. 


MORE  COST-CUniNG  TIPS 

Industry  experts  say  reducing  storage  costs  is  a  step- 
by-step  process  that  begins  with  planning  that  is 
diligent  and  ongoing.  Here  are  five  key  steps: 
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iSCSI  Brings 
Lower-Cost 
Storage  Networks 

INTERNET  SCSI,  OR  iSCSI,  was  de¬ 
signed  to  offer  the  advantages  of 
storage  consolidation,  without  the 
headache  of  Fibre  Channel  devices 
and  cabling,  by  enabling  block-level 
data  delivery  over  IP  networks. 

“Companies  should  be  running, 
not  walking,  to  iSCSI,”  says  Steve 
Duplessie,  an  analyst  at  Enterprise 
Strategy  Group.  “The  payback  is  so 
strong  and  so  fast  that  enterprises 
will  look  silly  if  they  wait.  And  iSCSI  is 
driving  prices  down  for  [Fibre  Chan¬ 
nel]  networks.” 

One  convert  is  Denver  Health 
Medical  Center.  Its  IT  environment 
consists  of  16  buildings  connected 
via  Gigabit  Ethernet,  22  community 
health  clinics  connected  via  Sonet, 
166  clustered  servers  (125  Windows, 
20  Unix  and  various  others)  and  two 
SANs  -  a  Fibre  Channel  SAN  and  an 
IP  SAN. 

“We  found  FC  SANs  to  be  expen¬ 
sive  to  implement,  and  they  required 
specialized  training  and  technicians," 
says  Jeff  Pelot,  chief  technology  offi¬ 
cer  at  Denver  Health.  “An  IP  SAN  is 
so  much  more  affordable,  and  imple¬ 
menting  one  is  like  building  some¬ 
thing  with  Lego." 

Pelot  says  he  doesn’t  think  his  fa¬ 
cility  requires  FC  buildout,  especially 
now  that  IP  technology  has  matured. 
However,  Denver  Health  fully  intends 
to  maintain  its  existing  SAN.  With  the 
infrastructure  in  place,  it  makes  no 
sense  to  eliminate  it.  Instead,  the  fa¬ 
cility  chose  to  expand  its  storage  plat¬ 
form  with  an  IP  SAN  from  LeftHand 
Networks  Inc.  in  Boulder,  Colo. 

Glenn  Exline,  manager  of  ad¬ 
vanced  technology  for  the  Air  Force’s 
45th  Space  Wing,  points  out  that  the 
big  advantage  of  a  Fibre  Channel 
SAN  is  that  it  removes  storage  and 
backup  traffic  from  the  network.  By 
doing  so,  his  organization  sped  up  its 
existing  network. 

“Allowing  user  access  to  the  same 
data  network  that  is  harnessed  for 
storage  is  a  big  mistake,"  says  Exline. 

However,  Pelot  says  that  perfor¬ 
mance  turned  out  to  be  far  less  of  a 
problem  than  many  feared.  “Although 
I/O  is  very  slightly  down  compared  to 
the  FC  SAN,  the  users  have  never  no¬ 
ticed  the  difference,”  he  says. 

-Drew  Robb 
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Long  Distance, 
Short  Money 

Storage  over  IP  provides  a 
cheaper,  faster  alternative  for  data 

backup.  By  Lucas  Mearian 
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atural  DISASTERS  and  gov¬ 
ernment  regulations  have 
put  pressure  on  companies 
to  back  up  data  farther  away 
from  their  main  data  centers 
than  they  do  now,  but  achieving  that 
goal  can  be  pricey.  Tape  is  one  option, 
but  it’s  slow  to  restore.  Dedicated  net¬ 
works  can  replicate  data  over  a  WAN, 
but  at  a  bandwidth  price. 

In  their  quest  for  cheaper  alterna- 
s,  some  companies  are  turning  to  a 
still-developing  option.  Storage  over  IP, 
or  the  replication  of  block-level  data 
over  leased  virtual  private  networks, 
allows  users  to  select  the  type  of  wide- 
area  service  that  best  meets  their  bud¬ 


get  and  application  requirements. 

“It’s  a  lot  faster  than  tape.  And  IP  is  a 
lot  less  expensive  than  a  dedicated 
line,”  says  James  Opfer,  an  analyst  at 
Gartner  Inc. 

The  three  main  long-distance  trans¬ 
mission  protocols  —  Internet  SCSI 
(iSCSI),  Fibre  Channel  over  IP  (FCIP) 
and  Internet  Fibre  Channel  Protocol  — 
are  all  significantly  different,  but  they 
provide  a  common  function:  transport¬ 
ing  block-level  storage  over  an  IP  net¬ 
work,  which  allows  administrators  to 
use  inexpensive  Ethernet-TCP/IP  net¬ 
works  to  transport  and  access  storage 
over  LANs,  WANs  or  metropolitan- 
area  networks. 


ISCSI,  which  transmits  block-level 
data  directly  over  Ethernet,  is  primari¬ 
ly  a  server-to-storage  interconnect 
within  the  data  center.  It  takes  advan¬ 
tage  of  ubiquitous  Ethernet  networks 
to  consolidate  Windows  and  Linux 
server  backups  by  connecting  LANs  to 
storage-area  networks  (SAN).  New 
vendors  are  now  offering  arrays  that 
use  iSCSI  as  a  tunneling  protocol  to 
transmit  over  long  distances. 

Savings  Spots 

The  greatest  savings  in  using  IP  to 
transport  data  between  data  centers 
comes  from  reduced  bandwidth.  Long¬ 
distance  replication  of  block-level  data 
can  use  IP,  Synchronous  Optical  Net¬ 
work  (Sonet)  and  Asynchronous  Trans¬ 
fer  Mode  (ATM)  networks  to  transmit 
data,  with  little  difference  in  price  as 
long  as  it’s  not  a  dedicated  line. 

“It’s  not  the  hardware.  Every  time  I 
talk  to  people,  they  say  it’s  the  cost  of 
bandwidth  services,”  says  Opfer. 

But  exact  savings  are  hard  to  pin 
down:  Opfer  says  bandwidth  costs  can 
vary  widely  by  region.  If  you’re  using 
“dark  fiber,”  or  surplus  fiber-optic 
cable,  “you’re  going  to  get  wild  swings 
in  the  price,”  he  says.  And  with  IP, 
there’s  no  need  to  hire  Fibre  Channel 
network  administrators  or  buy  switch¬ 
es  or  host  bus  adapters  to  create  the 
network  interface. 

But  financial  firms  and  other  compa¬ 
nies  dealing  with  sensitive  data  are 
still  squeamish  about  adopting  a  stor- 
age-over-IP  framework,  says  Dianne 
McAdam,  an  analyst  at  Data  Mobility 
Group  LLC  in  Nashua,  N.H.  “What  I  do 
see  changing  is  the  small  to  medium- 
size  businesses,  where  in  the  past  they 
looked  at  doing  replication  and  then 
got  the  price  tag  and  said,  ‘Oh  my 
God,’  ”  she  says. 

Some  large  companies  say  the  cost 
benefits  outweigh  the  risks.  For  exam¬ 
ple,  Don  Bolton,  manager  of  infrastruc¬ 
ture  and  systems  services  at  Teppco 
Partners  LP,  an  energy  company  in 
Houston,  understands  costs  issues 
associated  with  disaster  recovery. 
Teppco  had  been  paying  $250,000  to 
$500,000  a  year  to  SunGard  Data  Sys¬ 
tems  Inc.  in  Wayne,  Pa.,  to  ensure  that 
should  the  company’s  systems  go 
down,  they  could  power  up  in  another 
region  without  losing  data. 

Earlier  this  year,  Bolton  says,  he  de¬ 
cided  that  Teppco  could  perform  that 
chore  itself  by  replicating  mission- 
critical,  block-level  data  via  a  T1  line 
between  data  centers  in  Houston  and 
Tulsa,  Okla.  —  a  distance  of  about  500 
miles.  That  move  has  cut  his  costs  by 
more  than  half  with  a  quick  return  on 
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investment.  “I  was  able  to  take  an  ex¬ 
isting  facility  we  had  and  put  $200,000 
in  it  and  install  like  servers  with  a  16- 
month  payback  on  our  investment. 

And  it’s  allowed  us  to  grow  our  infra¬ 
structure,”  Bolton  says. 

Teppco  asynchronously  replicates 
block-level  data  from  Oracle  and  SQL 
databases  that  reside  on  clustered  ar¬ 
rays  from  Network  Appliance  Inc.  that 
use  NetApp’s  SnapMirror  application. 
“It’s  pretty  interesting  technology.  If  I 
was  a  superlarge  shop  at  Continental 
Airlines  or  something,  with  hundreds 
of  terabytes,  I  don’t  know  if  this  would 
be  the  solution.  But  with  this  size,  it  is 
perfect,”  Bolton  says. 

In  asynchronous  mode,  SnapMirror 
provides  read-only,  online  replication 
of  a  source  file  system  (volume  or  quo¬ 
ta  tree  level).  In  the  event  of  a  disaster, 
Bolton  says  the  mirror  site  could  be 
used  as  the  primary,  converting  the 
SnapMirror  replica  into  a  writable  file 
system  and  replacing  the  original. 

IP  Payoff 

Edward  Jones  &  Co.  has  begun  to  reap 
the  rewards  of  three  years  of  work  and 
an  $80  million  investment  in  a  storage- 
over-IP  network  [QuickLink  49629]. 
The  system  is  replicating  up  to  700GB 
of  data  daily  to  a  fully  redundant  back¬ 
up  site  located  1,600  miles  away  from 
the  brokerage’s  main  data  center,  near 
St.  Louis.  Edward  Jones  has  created  a 
secondary  site  in  Tempe,  Ariz.,  that’s  a 
replica  of  the  primary  data  center,  com¬ 
plete  with  450TB  of  SAN-based  data. 

Bill  Hayden,  director  of  data  services 
at  Edward  Jones,  which  is  using  FCIP 
over  ATM  to  tunnel  its  data  across 
the  U.S.,  says  prices  have  continued 
to  drop  on  network  bandwidth.  “It 
doesn’t  matter  whether  it’s  running 
IP,  Sonet  or  ATM,”  the  prices  are  the 
same,  he  says. 

The  payback?  All  of  Edward  Jones’ 
Oracle  databases  are  replicated  nation¬ 
wide  in  under  five  seconds.  File  ser¬ 
vices  are  replicated  every  four  minutes, 
and  mainframe  databases  are  typically 
replicated  in  30  minutes.  The  company 
says  it  can  flip  a  switch  and  begin  using 
its  secondary  site  as  its  primary  one. 

“Our  sticking  point  is  our  [VSAM 
flat  files]  on  our  mainframe,”  Hayden 
says.  VSAM  flat  files  still  take  four 
hours  to  replicate,  a  problem  that  Hay¬ 
den  says  could  be  resolved  by  updating 
Edward  Jones’  EMC  Symmetrix  arrays 
and  replication  software. 

“There  are  always  issues,”  he  says. 
“We’re  always  looking  to  get  the  data 
there  faster  and  looking  for  ways  to  get 
the  data  to  the  point  where  we  can  up¬ 
date  it  at  either  site.”  ©  49821 


Introducing  the  Fujifilm  3592  enterprise-class  data  storage  tape. 

While  Fujifilm  3592  is  a  brand  new  addition  to  our  full  line  of  superior  quality  data  storage  media,  it  comes  from  a  company 
that  is  anything  but  a  new  brand.  In  1995,  our  technology  enabled  the  first  gigabyte-class  metal  particle  enterprise  1/2"  tape. 
Since  then,  steady  innovation  has  culminated  in  a  high-end  1/2"  tape  with  NANOCUBIC  Technology,  the  magnetic  coating 
technology  leveraged  by  world-leading  hardware  manufacturers  in  development  of  their  latest-generation  enterprise-class 
drive  systems.  Specify  Fujifilm  on  your  next  high-end  tape  order.  It’s  the  brand  that  other  brands  trust. 
To  find  out  more  about  our  complete  line  of  reliable  data  storage  media,  visit  us  at:  www.fujifilm.com 
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At  ata  airlines  inc.,  the  prac¬ 
tice  of  buying  refurbished 
storage  systems  started  small, 
with  the  purchase  of  a  work¬ 
group-size  disk  array.  Over 
the  past  six  years,  the  $1.2  billion  air¬ 
line  bought  more  and  more  used  stor¬ 
age  equipment,  including  enterprise- 
size  storage  systems,  tape  libraries  and 
eventually  Fibre  Channel  storage-area 
networks.  Today,  “there  really  isn’t  a 
case  where  we  wouldn’t  consider  pre¬ 
viously  owned  storage  systems,”  says 


Buying  used  storage 
equipment  is 
cheaper,  but  riskier, 
than  buying  new 
gear.  By  Mary  Brandel 


avings 


Paul  Smith,  director  of  information 
services  at  Indianapolis-based  ATA. 

The  result:  savings  that  add  up  to  at 
least  50%  off  list  price  for  used  storage 
components  and  60%  to  70%  savings 
for  used  storage  systems. 

“Why  pay  top  dollar  when  you  can 
let  someone  else  take  the  hit  on  new 
equipment?”  says  Chuck  Copell,  man¬ 
ager  of  hardware  support  services  at 
Affiliated  Computer  Services  Inc.,  a 
$4  billion  outsourcer  in  Dallas.  “Stor¬ 
age  hardware  depreciates  as  fast  or 
faster  than  an  automobile.  Whenever 
possible,  I  like  to  buy  used  equipment.” 

The  hottest  used  items  include  tape 
and  optical  libraries,  as  well  as  other 
archive  and  backup  products,  where 
performance  is  less  critical  and  the  ob¬ 
solescence  cycle  is  slower,  according 
to  resellers.  But  the  market  for  newer 
equipment,  such  as  Fibre  Channel 
SAN  switches,  is  also  active,  and  mid¬ 
range  disk  arrays,  such  as  IBM  Shark’s 
and  Hitachi  Data  Systems  Corp.’s 
Thunder  system,  also  sell  well. 

The  benefits  go  beyond  cost  savings 
to  include  faster  acquisition  cycles  and 
more-flexible  maintenance  programs. 
But  there  are  risks  involved.  Before  do¬ 
ing  business  with  storage  remarketers, 
users  should  consider  the  answers 
to  these  common  questions  about 
secondhand  storage  equipment. 


11s  It  Reliable? 

This  is  perhaps  the  first  question 
asked  by  people  who  have  never 
purchased  secondhand  storage. 
But  experienced  users  have  no  reser¬ 
vations  about  reliability,  as  long  as 
they’re  purchasing  from  a  reputable 
vendor  that  sets  up,  tests  and  refur¬ 
bishes  the  systems.  The  vendor  should 
also  offer  a  warranty  that  the  equip¬ 
ment  is  in  working  condition  upon  ar¬ 
rival  at  the  customer  site  and  possibly 
even  for  30  days  until  the  system 
comes  under  a  service  contract  with 
the  manufacturer  or  a  third-party 
provider.  Some  resellers  will  also  offer 
longer  warranties  on  certain  equip¬ 
ment  for  a  higher  price. 

In  any  case,  “you  have  to  be  comfort¬ 
able  with  the  vendor  you  choose,”  says 
Smith.  “It  could  make  all  the  difference 
if  the  system  has  been  in  a  climate- 
controlled  environment  as  opposed  to 
a  hothouse  where  the  disks  have  been 
spinning  in  100-degree  heat.” 


2  Can  I  Get  a  Service 
Agreement? 

It’s  important  to  determine 
beforehand  if  the  equipment 
you’re  buying  is  eligible  for  mainte- 

Continued  on  page  42 


Meet  the  Winners 
at  SNW 

“Best  Practice”  Storage  Users 
to  Be  Announced  October  25th 
at  Storage  Networking  World 
Conference 
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STORAGE  NETWORKING  WORLD 

Best  Practices 

IN  STORAGE 


Storage  Networking  World  (SNW),  in  conjunction  with  Computerworld 
and  the  Storage  Networking  Industry  Association  (SNIA), 
proudly  presents  the  fifth  SNW  “Best  Practices  in  Storage” 

Awards  Program.  This  program  honors  ten  IT  user  “best  practice” 
case  studies  selected  from  a  field  of  qualified  finalists. 


AWARDS  PROGRAM 


AWARDS  PROGRAM 
EXCLUSIVELY  SPONSORED  BY: 


EMC2 


Two  awards  will  be  presented  in  each  of  the  following  five  categories: 


where  information  lives 


Systems  Implementation 

Recognizes  the  successful  design,  implementation  and  management  of  an  interoperable  environment. 

This  category  also  demonstrates  the  ability  to  source  from  multiple  vendors. 

Storage  Reliability  and  Data  Recovery 

Acknowledges  implementation  strategies  and  programs  to  insure  highly  available  information  and  data  access. 


Data  Lifecycle  Management _ 

Exemplifies  solutions  and  processes  to  manage  the  information  over  its  lifecycle. 

Industry  Regulation  Compliance  and  Corporate  Governance _ 

Spotlights  solutions  being  deployed  to  meet  or  exceed  industry  regulations  specified  by  the  SEC,  Patriot  Act,  HIPAA, 
Sarbanes-Oxley,  DoD,  and  CFR. 


Innovation  and  Promise 


Successful  “pioneering”  of  leading/bleeding-edge  storage  networking  technology  will  be  recognized  in  this  category. 
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Stick  With  What  You  Know 


WHEN  ATA  AIRLINES  purchased 
its  first  SAN,  the  equipment  wasn’t 
available  on  the  refurbished  market, 
and  looking  back,  that’s  a  good 
thing,  says  Paul  Smith,  director  of 
information  services. 

After  installing  the  new  equip¬ 
ment,  the  SAN  didn’t  perform  up  to 
its  published  specifications,  and  the 
manufacturer  had  to  be  called  in  for 
assistance.  “Having  that  extra  layer 
of  the  remarketer  could  have  made  it 
difficult,”  Smith  says.  “We  wouldn’t 
have  had  the  clout,  and  the  problem 


Continued  from  page  40 
nance  from  the  original  manufacturer 
or  from  a  reputable  third  party.  “Some 
of  the  big  vendors  like  HP,  IBM  and 
Sun  are  very  strict  about  what  they 
will  and  won’t  support  as  far  as  the  age 
of  the  equipment  and  the  firmware  and 
its  interaction  with  their  more  modern 
equipment,”  Copell  warns. 

Vendors  may  also  provide  mainte¬ 
nance  contracts  more  readily  if  you 
buy  from  an  authorized  reseller  of 
their  equipment.  Otherwise,  they  may 
require  a  site  visit  and  an  audit  to  per¬ 
form  necessary  upgrades  or  firmware 
changes  —  for  a  price,  of  course. 

You  should  also  ensure  that  all  the 
drives  within  a  storage  system  are 
original  manufacturer  drives,  or  the 
manufacturer  won’t  place  them  under 
maintenance  agreements,  according  to 
Robert  Davie,  founder  of  ITParade.- 
com  Inc.,  a  Web-based  marketplace  for 
refurbished  computer  equipment  in 
Cary,  N.C.  For  example,  a  Sun  Micro¬ 
systems  array  must  have  all  Sun- 
manufactured  drives  in  it. 

IBM  is  one  of  the  only  vendors  with 
well-defined  processes  for  servicing 
the  secondhand  market,  says  James 
Davie,  a  vice  president  at  Canvas  Sys¬ 
tems,  a  reseller  in  Norcross,  Ga.  It  of¬ 
fers  a  “banding  process,”  by  which  IBM 
certifies  that  the  system  is  “mainte¬ 
nance  service  qualified”  at  the  time  of 
the  sale.  The  system  arrives  at  the  cus¬ 
tomer  site  with  a  silver  band  around  it, 
IBM  engineers  implement  the  system, 
and  IBM  provides  the  maintenance 
contract.  This  comes  at  an  additional 
cost  of  about  $1,000,  according  to 
Doug  Rengel,  a  consultant  at  Xerxes 
Computer  Corp.,  a  refurbished  com¬ 
puter  reseller  in  Bloomington,  Minn., 
so  customers  might  choose  this  option 
only  for  higher-end  equipment. 


may  not  have  resonated  with  the 
vendor.”  The  lesson:  If  you’re  work¬ 
ing  with  an  emerging  technology  or 
one  you’re  not  intimately  familiar 
with,  your  risk  factors  rise. 

Another  point:  In  the  refurbished 
market,  you  don’t  have  the  honey¬ 
moon  period  when  you  can  call  in  all 
of  the  vendor’s  resources. 

ATA  bought  its  first  SAN  four  years 
ago.  Since  then,  Smith  has  turned  to 
the  refurbished  market  when  he  has 
needed  an  additional  SAN  array. 

- MaryBrandel 


Some  companies,  such  as  ATA  Air¬ 
lines,  don’t  rely  on  vendors  for  service 
and  instead  maintain  their  equipment 
themselves.  ATA  even  keeps  its  own 
inventory  of  spare  parts.  “We’re  an 
extreme  case,”  Smith  acknowledges. 

Bruce  Caswell,  vice  president  of 
marketing  at  World  Data  Products,  a 
refurbished  computer  reseller  in  Min¬ 
netonka,  Minn.,  says  roughly  80%  of 
his  company’s  customers  put  their 
hardware  on  a  maintenance  contract, 
while  20%  are  self-maintainers.  Of 
those  that  opt  for  maintenance  con¬ 
tracts,  most  turn  to  credible  third- 
party  providers  such  as  Northrop 
Grumman  Corp.,  DecisionOne,  Storage 
Technology  Corp.  and  General  Electric 
Co.  to  lower  their  cost  of  maintenance. 

Should  I  Expect 
Vendor  Pusn-back? 

Particularly  if  you’re  purchas¬ 
ing  a  high-end  system,  many 
vendors  will  try  to  dissuade  you  from 
purchasing  refurbished  equipment  by 
threatening  exorbitant  “recertifica¬ 
tion”  fees  or  even  refusing  to  service  it. 
“I  know  one  large  insurance  company 
that  got  strong  push-back  from  Sun  at 
the  CFO  level  and  decided  not  to  pur¬ 
chase  refurbished  because  of  that,” 
says  Robert  Davie.  On  a  StorageTek 
L700  tape  drive,  the  relicensing  fee 
can  reach  $2,200,  he  says. 

According  to  many  observers,  the 
vendor  with  one  of  the  worst  reputa¬ 
tions  in  this  regard  is  EMC  Corp. 

“EMC  has  a  subtle  way  of  controlling 
the  market  in  its  own  used  gear,”  says 
John  Webster,  founder  of  the  Data 
Mobility  Group  LLC,  a  consultancy 
in  Nashua,  N.H.  “They  say  that  the 
microcode  to  run  the  machine  is  not 
transferable  and  that  you  need  to  buy 
a  new  microcode  license  —  which, 


by  the  way,  ain’t  cheap.” 

EMC  defends  its  relicensing  require¬ 
ments.  “Our  systems  are  intelligent 
storage  systems  that  have  software  in¬ 
corporated  into  them,  and  it  is  stan¬ 
dard  practice  throughout  the  industry 
that  the  software  license  doesn’t  get 
transferred  when  the  hardware  gets 
transferred,”  an  EMC  spokesman  says. 
“The  licensing  also  ensures  that  the 
product  operates  as  it’s  supposed  to 
for  the  customer.” 

It’s  important  to  keep  in  mind  that 
these  types  of  fees  are  negotiable,  re¬ 
sellers  say,  and  that  salespeople  can 
reduce  or  even  waive  them.  A  good 
negotiating  point  is  to  suggest  that  you 
might  opt  for  third-party  maintenance, 
meaning  the  vendor  v/ill  lose  the  ser¬ 
vice  revenue  as  well.  Robert  Davie  rec¬ 
ommends  contacting  the  field  service 
rep  instead  of  the  salesperson,  since 
the  service  rep  is  typically  compensat¬ 
ed  on  the  service  contract  revenue  and 
is  more  likely  to  negotiate  with  cus¬ 
tomers  to  reduce  relicensing  fees. 

Smith  advocates  having  a  frank  dis¬ 
cussion  with  your  vendor  about  servic¬ 
ing  issues.  With  his  company’s  storage 
vendor,  Hewlett-Packard  Co.,  “it  took 
some  time,”  he  says.  “There  were  light¬ 
ly  intimated  threats  of  refusal  to  put  it 
under  warranty  and  tack  on  recertifi¬ 
cation  costs.”  How  the  vendor  reacts, 
Smith  says,  can  either  cement  the  rela¬ 
tionship  or  end  it. 

Will  There  Be 
Compatibility  Issues? 

One  gotcha  on  used  storage 
equipment  is  compatibility 
with  newer  equipment,  particularly  in 
the  areas  of  firmware  revisions  and  in¬ 
terface  compatibility'.  “If  you  have  the 
luxury  of  time,  it’s  easy  enough  to  take 
a  look  at  your  operating  systems  and 
firmware  revisions  and  patch-level  kits 
and  determine  whether  the  equipment 
will  be  an  easy  Fit,”  Affiliated  Comput¬ 
er  Services’  Copell  says.  “But  around 
here,  things  are  on  a  deadline  mentali¬ 
ty,  and  that’s  when  you  find  problems.” 

In  some  cases,  resellers  load  the  lat- 


MARKET  MEASURE 

Although  the  size  of  the  used  storage 
market  isn’t  easy  to  measure,  one 
estimate  puts  it  at  about  5%  of  the 
overall  used  computer  market, 
according  to  Robert  Davie,  founder 
of  ITParade.com.  The  overall  market 
is  expected  to  reach  87.5  billion  in 
the  U.S.  this  year,  according  to  Bruce 
Caswell,  vice  president  of  marketing 
at  World  Data  Products. 


est  firmware  revisions  onto  the  equip¬ 
ment  they  sell;  in  others,  their  tech 
support  staffs  can  help  with  fixes  when 
problems  are  discovered. 

At  ATA  Airlines,  Smith’s  staff  con¬ 
ducts  its  own  research  into  firmware 
requirements.  “We  need  to  be  pre¬ 
pared  to  understand  why  you  can  have 
two  disks  that  carry  the  same  part 
number,  and  one  works  while  the  other 
doesn’t,”  he  says. 

Also  keep  in  mind  that  standards 
change.  “You  can  mistakenly  assume 
that  a  piece  of  old  gear  can  do  some¬ 
thing  that’s  commonplace  today,”  says 
Marc  Farley,  president  of  Building 
Storage  Inc.,  a  consultancy  in  Saratoga, 
Calif.  For  instance,  an  older  Fibre 
Channel  host  bus  adapter  might  be 
available  for  $20,  but  it’s  useless  if  it 
doesn’t  support  a  fabric  log-in,  which 
most  SANs  use  today. 

Can  I  Trust  the 
Remarketer’s  Staff? 

The  caliber  of  vendors  in  the 
refurbished  market  can  vary 
widely,  Smith  says,  and  the  best  way  to 
know  what  you’re  getting  is  to  check 
the  resumes  of  the  technical  staffers. 

“We’ve  relied  on  [World  Data  Prod¬ 
ucts]  heavily  to  ensure  things  work 
when  they  got  here  and  do  some  inte¬ 
gration,”  he  says.  “In  essence,  the  re¬ 
marketer’s  staff  is  an  extension  of  your 
staff,  so  I’d  advocate  looking  carefully 
at  the  vendor’s  hiring  practices  and  the 
quality  of  their  employees.” 

In  a  long-term  relationship,  a  re¬ 
marketer  can  help  you  decide  what 
will  work  best  with  your  environment 
and  what  options  will  save  you  the 
most  money.  “There  are  tons  of  pre¬ 
requisites  for  purchasing  storage  — 
what  are  you  attaching  to,  what  storage 
adapters  are  you  using,  what  SAN  de¬ 
vices  are  you  using,”  says  James  Davie. 

“Sometimes,  the  people  selling  in 
the  used  market  have  no  idea  what 
they’re  promoting,”  Farley  says.  For 
instance,  when  he  has  purchased  on 
eBay,  he’s  been  given  data  sheets  that 
don’t  match  the  product  being  sold. 
“Clearly,  they  had  no  idea  what  they 
were  doing,  but  they  were  sure  eager 
to  sell  it,”  Farley  says.  ©  49422 


Brandel  is  a  Computerworld  contribut¬ 
ing  writer  in  Grand  Rapids,  Mich.  Con¬ 
tact  her  at  mary.brandel@comcast.net. 


USED  EQUIPMENT  MARKET 

Prices  in  the  secondary  market  can  range  from  20% 
to  30%  of  manufacturers’  suggested  prices  for  new 
equipment: 

QuickLink  34975 
www.computerworld.com 


IT’S  STORAGE.  IT’S  FLEXIBLE.  IT’S  YOU. 

Yes,  you.  Whatever  is  vital  to  you -x-rays,  blueprints,  customer  information -storing 
vast  amounts  of  data  is  important.  Even  more  important  is  access  to  that  information. 
Having  data  right  at  your  fingertips.  Welcome  to  the  on  demand  world  enabled 
by  IBM  TotalStorage®  systems.  Where  your  servers  and  storage  work  together  to 
better  manage  data  across  your  organization,  giving  you  a  broad  range  of  storage 
options. Thus,  a  total  recognition  of  TCO,  scalability  and  flexibility.  IBM  TotalStorage 
is  for  you.  Find  and  learn  the  whole  story  at  ibm.com/totalstorage/total 

IBM  TotalStorage® 


IBM  and  TotalStorage  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of 
others.  ©2004  IBM  Corporation.  All  rights  reserved. 
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find  Storage 

DEFINITION 

Grid  storage,  analogous  to  grid  computing,  is  a  new  model  for 
deploying  and  managing  storage  distributed  across  multiple  sys¬ 
tems  and  networks,  making  efficient  use  of  available  storage  ca¬ 
pacity  without  requiring  a  large,  centralized  switching  system. 


BY  RUSSELL  KAY 

E  ROUTINELY  talk 
about  the  electri¬ 
cal  power  grid  or 
the  telephone 
grid,  and  it’s 
pretty  clear  what  we  mean  — 
a  large,  decentralized  network 
with  massive  interconnectivi¬ 
ty  and  coordinated  manage¬ 
ment.  A  grid  is,  in  fact, 
a  meshed  network  in 
which  no  single  cen¬ 
tralized  switch  or  hub 
controls  routing.  Grids 
offer  almost  unlimited 
scalability  in  size  and 
performance  because  they 
aren’t  constrained  by  the 
need  for  ever-larger  central 
switches.  Grid  networks  thus 
reduce  component  costs  and 
produce  a  reliable  and  re¬ 
silient  structure. 

Applying  the  grid  concept 


to  a  computer  network  lets  us 
harness  available  but  unused 
resources  by  dynamically  allo¬ 
cating  and  deallocating  capac¬ 
ity,  bandwidth  and  processing 
among  numerous  distributed 
computers.  A  computing  grid 
can  span  locations,  organiza¬ 
tions,  machine  architectures 
and  software  boundaries,  offer¬ 
ing  power,  collabora¬ 
tion  and  information 
access  to  connected 
users.  Universities  and 
research  facilities  are 
using  grids  to  build 
what  amounts  to  su¬ 
percomputer  capability  from 
PCs,  Macintoshes  and  Linux 
boxes. 

After  grid  computing  came 
into  being,  it  was  only  a  matter 
of  time  before  a  similar  model 
would  emerge  for  making  use 
of  distributed  data  storage. 


Most  storage  networks  are 
built  in  star  configurations, 
where  all  servers  and  storage 
devices  are  connected  to  a  sin¬ 
gle  central  switch.  In  contrast, 
grid  topology  is  built  with  a 
network  of  interconnected 
smaller  switches  that  can 
scale  as  bandwidth  increases 
and  continue  to  deliver  im¬ 
proved  reliability  and  higher 
performance  and  connectivity 
(see  diagrams). 

What  Is  Grid  Storage? 

Based  on  current  and  pro¬ 
posed  products,  it  appears 
that  a  grid  storage  system 
should  include  the  following: 

Modular  storage  arrays:  These 
systems  are  connected  across 
a  storage  network  using  serial 
ATA  disks.  The  systems  can 
be  block-oriented  storage 
arrays  or  network-attached 


storage  gateways  and  servers. 

Common  virtualization  layer: 

Storage  must  be  organized  as 
a  single  logical  pool  of  re¬ 
sources  available  to  users. 

Data  redundancy  and  availabil¬ 
ity:  Multiple  copies  of  data 
should  exist  across  nodes  in 
the  grid,  creating  redundant 
data  access  and  availability  in 
case  of  a  component  failure. 

Common  management:  A  sin¬ 
gle  level  of  management 
across  all  nodes  should  cover 
the  areas  of  data  security,  mo¬ 
bility  and  migration,  capacity 
on  demand,  and  provisioning. 

Simplified  platform/management 
architecture:  Because  common 
management  is  so  important, 
the  tasks  involved  in  adminis¬ 
tration  should  be  organized  in 
modular  fashion,  allowing  the 
autodiscovery  of  new  nodes  in 
the  grid  and  automating  vol¬ 
ume  and  file  management. 

Three  Basic  Benefits 

Applying  grid  topology  to  a 
storage  network  provides 
several  benefits,  including 
the  following: 

Reliability.  A  well-designed 
grid  network  is  extremely  re¬ 
silient.  Rather  than  providing 
just  two  paths  between  any 
two  nodes,  the  grid  offers  mul¬ 
tiple  paths  between  each  stor¬ 
age  node.  This  makes  it  easy 
to  service  and  replace  compo¬ 
nents  in  case  of  failure,  with 
minimal  impact  on  system 


availability  or  downtime. 

Performance.  The  same  fac¬ 
tors  that  lead  to  reliability  also 
can  improve  performance.  Not 
requiring  a  centralized  switch 
with  many  ports  eliminates 
a  potential  performance  bot¬ 
tleneck,  and  applying  load¬ 
balancing  techniques  to  the 
multiple  paths  available  offers 
consistent  performance  for 
the  entire  network. 

Scalability.  It’s  easy  to  ex¬ 
pand  a  grid  network  using 
inexpensive  switches  with 
low  port  counts  to  accommo¬ 
date  additional  servers  for  in¬ 
creased  performance,  band¬ 
width  and  capacity.  In  essence, 
grid  storage  is  a  way  to  scale 
out  rather  than  up,  using  rela¬ 
tively  inexpensive  storage 
building  blocks.  For  more  on 
scaling  up  vs.  scaling  out,  see 
QuickLink  a5050.  O  49829 


Kay  is  a  Computerworld  con¬ 
tributing  writer.  You  can  reach 
him  at  russkay@charter.net. 


HP  LEADS  THE  WAY 

For  more  on  the  first  grid  storage  product, 
from  Hewlett-Packard,  and  the  activities  of 
other  vendors,  visit  our  Web  site: 

QuickLink  49972 
www.computerworld.com 

Are  there  technologies  or  issues  you’d  like 
to  learn  about  in  QuickStudy?  Send  your 
ideas  to  quickstudy@computerworid.com 

To  find  a  complete  archive  of  our 
QuickStudies,  go  online  to 

0  computerworld.com/quickstudies 


The  Grid 

Storage 

Difference 


Let’s  consider  a  simple  net¬ 
work  of  18  storage  nodes  in 
a  high-avai!ability  environ¬ 
ment,  where  ail  nodes  re¬ 
quire  access  to  one  anoth¬ 
er.  The  usual  way  to  design 
this  would  be  with  two  16-port 
switches  (the  second  one  for  fail-over)  in  a  star  configuration.  Thus  each  switch  is  con¬ 
nected  to  each  of  the  16  nodes  and  each  node  is  connected  to  both  switches,  and  we  have 
32  wired  connections  and  two  expensive  switches.  There  are  two  possible  paths  between 
any  two  nodes.  If  we  want  to  expand  the  network,  we  can  add  more  nodes  only  by  also 
replacing  the  switches  with  ones  that  have  more  ports  available. 


Conventional  16-node  storage  configuration 


In  a  grid  arrangement,  we 
could  arrange  the  nodes  in 
four  groups  of  four,  each 
connected  to  a  simple 
four-port  switch.  We  would 
also  use  four  additional  four- 
port  switches,  each  connect¬ 
ing  to  one  node  in  each  of  the 
four  groups.  Now  we  have  32 
wired  connections  (the  same 
as  before),  but  eight  four-port 
switches  instead  of  two  16- 
port  units,  and  each  node  is 
connected  to  two  switches.  In 
the  event  of  a  failure  of  any  of 
the  switches,  there  are  many  possible  alternate  paths  to  connect  any  two  nodes.  The 
arrangement  is  more  resilient  and  less  susceptible  to  catastrophic  failure  than  convention¬ 
al  configurations.  To  expand  the  network,  we  can  add  more  nodes  and  more  small  switch¬ 
es  without  having  to  re-engineer  the  whole  structure.  (Note:  We  could  have  achieved  a 
similar  result  by  configuring  this  with  four  eight-port  switches.) 
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For  example,  “an  enterprise  with  5,000 
employees  will  require  nearly  4TB  of 
storage  every  year”  for  e-mail  archiv¬ 
ing,  the  report  says.  “This  will  require 
storage  management  software  and  at 


least  one  full-time  storage  administra¬ 
tor.”  And  if  the  company  is  using  Fibre 
Channel  storage  systems,  it  may  need 
to  add  networking  equipment  to  the 
list,  The  Yankee  Group  says.  ©  49812 


From  the  Labs: 

The  Holographic  Disc 

«  0PTWARE  CORP.  in  Japan  (www. 
optware.co.jp/english)  has  come  out 
with  a  prototype  of  what  it  calls  the 
world’s  first  holographic  recording 
disc  for  reliable  recording  and  play¬ 
back  of  digital  movies.  The  disc 
(above,  left)  is  12  cm  in  diameter  — 
the  same  as  DVDs  and  CDs  —  and 
could  be  on  the  market  for  commercial 
use  in  the  first  quarter  of  2006  with  a 
capacity  of  200GB.  That’s  the  good 
news.  The  bad  news  is  that  the  re¬ 
corders  are  expected  to  cost  about 
$20,000,  and  the  discs  will  be  $100 
each.  A  less-expensive  version  for 
home  use  could  be  on  the  market  as 
soon  as  2007,  the  company  says. 

That  could  be  good  for  consumers 
but  bad  for  electronics  companies, 
which  will  be  trying  to  persuade  buy¬ 
ers  at  about  the  same  time  to  invest  in 
blue-laser  storage  discs  like  Blu-ray 
Disc  or  HD-DVD,  which  have  about 
one-fifth  the  capacity. 

Future  development  of  the  Holo¬ 
graphic  Versatile  Disc  technology 
could  boost  its  capacity  to  1TB  of  data, 
Optware  says.  —Martyn  Williams  and 
Paul  Kallender,  IDG  News  Service 


Storage  Capacity: 

The  Tipping  Point 

■  How  does  your  organization  compare  with 
these  benchmarks?  An  IDG  study  of  471 
North  American  organizations  found 
that,  on  average,  48%  of  their  total 
storage  capacity  is  currently  utilized, 
and  the  trigger  point  for  deciding  to 
add  more  storage  is  74%.  This  means 
that,  on  average,  their  storage  systems 
are  nearly  “three  quarters  full”  when 
they  add  storage  capacity.  The  insur¬ 
ance  and  transportation  industries 


push  the  threshold  further  than  other 
vertical  markets,  saying  their  trigger 
point  for  adding  storage  is  when  it 
exceeds  81%  utilization. 

The  insurance  industry  appears  ripe 
for  additional  storage  capacity,  IDC 
says,  because  a  quarter  of  the  insur¬ 
ance  companies  reported  that  at  least 
80%  of  their  capacity  is  currently  used. 


Events 

■  Storage  Networking  World,  Fall  2004 

www.snwusa.com 
Oct.  25-28;  Orlando 

■  High  Performance  Computing, 
Networking  and  Storage  Conference 

www.sc-conference.org/sc2004 
Nov.  6-12;  Pittsburgh 

■  Network  Storage  Conference  2005 

www.networkstorageconference.com 
March  7-9,  2005;  Milpitas,  Calif. 


Hidden  Costs  of 
E-mail  Archiving 

■  Regulatory  requirements  are  helping 
the  e-mail  archiving  technology  mar¬ 
ket  to  double  this  year,  according  to 
The  Yankee  Group  in  Boston.  But  large 
corporations  will  need  to  factor  in 
increased  storage,  systems,  network¬ 
ing,  software  and  management  costs, 
a  bulletin  from  the  research  firm  says. 


Storage  Drivers 

What  applications  are  currently 
driving  demand  for  more  data 
storage  in  your  organization? 


Increased  use  of  e-mail 


Data  warehousing 
Data  mining 
CRM 

E-business 
ERP 


BASE:  896  IT  decision-makers  in  North  America: 
multiple  responses  allowed. 

SOURCE:  IDC,  Framingham,  Mass.,  June  2004 


IT’S  COMPACT. 

IT’S  AFFORDABLE. 
IT’S  YOU. 


It’s  the  enterprise -class  IBM  TotalStorage®  DS6800  system. 
It’s  as  low  as  half  the  price'  and  takes  up  as  little  as  5%  of 
the  space2  of  that  “other”  enterprise  storage  offering  (the  EMC 
Symmetrix  DMX800).  With  Power  Architecture™  technology 
and  a  surprisingly  small  footprint,  it’s  designed  to  deliver 
lower  costs.  Is  it  storage  or  is  it  a  strategy?  It’s  both.  It’s  IBM 
TotalStorage  at  its  best. 

Want  to  see  for  yourself?  In  person? 

Learn  more  at  the  IBM  TotalStorage  Roadshow.  With  product 
presentations  and  the  latest  storage  news.  Don’t  miss  out. 
See  for  yourself  how  you  could  benefit  when  everything 
works  together.  For  more  information  or  to  register,  go  to 
ibm.com/totalstorage/save 

IBM  Iota] Storage® 


Compares  IBM  TotalStorage  DS6800  system  with  2TBs  Operating  Environment 

C?^?ftTre'  116TB  usin9  146GB  10K  FC  Drives’  4GB  o'  memory,  19  inch  rack 
and  FICON  Attachment  license  (zSeries  support),  and  EMC  Symmetrix  DMX800  with 
2TBs  Control  Center  Management  software,  1.16TB  using  146GB  10K  FC  Drives,  and 
4GB  of  memory.  List  prices  for  EMC  Symmetrix  obtained  from  Ideas  International 
www.ldeaslnternational.com,  as  of  10/1/04.  TBM  TotalStorage  DS6800  may  be  used’ 
as  a  stand-alone  unit,  or  mounted  into  a  rack.  Size  comparison  is  based  on  stand¬ 
alone  use.  IBM,  TotalStorage  and  Power  Architecture  are  trademarks  or  registered 
trademarks  of  International  Business  Machines  Corporation  in  the  United  States 
and/or  other  countries.  Other  company,  product  and  service  names  may  be 
trademarks  or  service  marks  of  others.  ©2004  IBM  Corporation.  All  rights  reserved. 
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SNAPSHOTS 

Top  of  Mind 

IT  managers  say  the  following 
storage  topics  will  be 
“extremely  important”  over 
the  next  three  months: 


Disaster  recovery/business  continuity 

1 54% 


52% 


Storage-area  networks 

H  31% 


Regulatory  compliance 

an  27% 


Storage  Problems 

IT  managers  say  these  are  the 
top  three  storage  headaches: 


Data  growth 


159% 


39% 


Insufficient  IT  staff 

BBSS  26% 


BASE:  91  IT  managers:  multiple  responses  allowed. 


Yawning  Over  IP 

IT  managers  don’t  seem  very 
excited  about  IP  storage,  with  many 
of  them  rating  it  as  neutral  or  un¬ 
important  for  the  next  six  months. 

r - Extremely 

1  ^  important 


Neutral 

35% 


SOURCE:  Computerworlcf  s  IT  Leader 
Research  Panel.  August  2004 


MARK  HALL 

Long  Live  Tape 

I’VE  BEEN  HANGING  AROUND  THE  RUMOR-MONGERING,  low-COSt  disk  drive 
crowd  lately,  so  I  started  to  think  that  their  ATA  drives  are  making  tape  obsolete. 
And  when  the  information  life-cycle  management  forces  added  their  whispers 
about  the  improved  performance  and  low  cost  of  archiving  data  to  fixed  disks, 

I  became  a  fervent  convert  to  the  notion  that  tape  is  all  but  dead. 

In  fact,  I  had  intended  to  write  something  like  my  “Farewell  Floppy”  column  of 
nearly  five  years  ago,  in  which  I  (correctly)  dismissed  the  floppy  disk  as  credible  IT 
technology.  I  had  the  similar  self-righteous  vigor  of  a  convert  as  I  set  forth  to  write  my 
“Death  to  Tape”  column. 


Alas,  I  did  my  research  before  writing.  (A  generally 
wise,  although  not  always  accomplished,  task  among 
journalists.)  Tape  is  far  from  dead.  If  anything,  thanks 
to  continued  technology  improvements  and  recent 
corporate  management  shenanigans  and  the  legisla¬ 
tive  responses  to  them,  tape  for  backup  and  archival 
storage  is  experiencing  a  resurgence. 

Take  IBM’s  recent  tape  business.  It  has  seen  four 
consecutive  quarters  of  double-digit  upticks  in  rev¬ 
enue.  And  its  main  competitor  for  tape  systems,  Stor¬ 
age  Technology  Corp.,  has  announced  16  consecutive 
quarters  of  year-over-year  earnings  growth. 

Those  aren’t  the  numbers  of  a  technology 
in  a  tailspin,  nor  are  they  what  I  expected 
to  find. 

While  technology  advances  and  lower 
costs  help  keep  tape  competitive  against 
ATA  drives  despite  drawbacks  in  perfor¬ 
mance,  it’s  the  work  of  politicians  that  is 
giving  tape  renewed  purpose  in  life.  After 
all,  they’ve  passed  Sarbanes-Oxley,  the 
Health  Insurance  Portability  and  Account¬ 
ability  Act  and  other  audit-friendly  legisla¬ 
tion,  seemingly  with  tape  in  mind. 

“A  couple  of  years  ago,  legislation  on  cor¬ 
porate  governance  changed  things,”  says 
Barry  Rudolph,  IBM’s  vice  president  for  tape  storage 
systems.  Changed  indeed  —  in  a  good  way  for  tape 
storage  makers. 

That’s  because  top  management  wants  IT  arch¬ 
ivists  to  err  on  the  side  of  saving  too  much  informa¬ 
tion  rather  than  too  little  and  to  spend  as  little  as  pos¬ 
sible  in  the  process.  For  today  (and  tomorrow),  that 
means  tape.  A  200GB  ATA  drive  sounds  cheap  at 
$140,  but  a  $40  tape  holds  just  as  much  uncompressed 
data.  By  the  end  of  the  year,  IBM  will  be  shipping  a 
400GB  version. 

Over  at  Fuji  Photo  Film  USA  in  Valhalla,  N.Y.,  Rich 
Gadomski  tells  me  that  his  company  has  already 
demonstrated  1TB  uncompressed  capacity  on  a  sin¬ 
gle  tape  cartridge  and  expects  to  have  it  on  the  mar¬ 
ket  in  a  year  or  two.  And  both  Fuji  and  IBM  claim 
that  single  tapes  with  10TB  to  15TB  of  storage  will 
ship  by  2010. 

Plus,  tape  archiving  systems  use  100%  of  a  tape’s 


capacity,  while  disk-to-disk  approaches  risk  duplicat¬ 
ing  the  same  inefficient  storage  utilization  rates  on 
backup  disks  as  on  production  ones. 

With  those  kinds  of  capacity  and  efficiency  num¬ 
bers,  it’s  clear  that  low-end  drive  makers  will  forever 
play  catch-up  to  tape  when  it  comes  to  the  storage 
capacity/cost  ratio.  Plus,  you  don’t  have  to  add  the 
incremental  expenses  of  a  full  RAID  storage  system, 
cooling  technology  and  electricity  that  you  need  to 
make  a  disk  drive  useful.  Tape  is  happy  just  to  sit  idle, 
drawing  no  power,  requiring  no  special  HVAC  support. 

ATA  disk  drive  makers  brag  that  their 
low-cost  technology  has  at  least  100  times 
the  performance  that  you’ll  experience  re¬ 
trieving  data  from  tape  system.  However, 
in  the  world  of  compliance-driven  storage, 
audits  aren’t  done  in  real  time.  You  can 
usually  retrieve  requested  information  in 
a  few  hours  —  or  days  —  and  still  meet 
user  needs.  That’s  right  up  tape’s  alley. 

Tape  has  an  obvious  portability  advan¬ 
tage  over  disk.  And  it  offers  less-obvious 
protection  against  disk-based  viruses  be¬ 
cause  you  can  always  revert  data  on  tape  to 
a  state  prior  to  an  infection.  But  an  infected 
disk  affects  the  whole  drive,  regardless  of 
what  state  the  data  might  be  in. 

So,  it  looks  like  you’ll  be  using  tape  systems  for  the 
foreseeable  future.  Instead  of  seeking  ways  to  dump 
tape,  you  need  to  develop  tape  strategies  with  the 
same  zeal  you  have  for  plans  to  migrate  and  upgrade 
operating  systems  and  applications. 

Tape  media  might  reliably  retain  data  for  30,  even 
50  years.  But  you  shouldn’t  count  on  it,  especially  be¬ 
cause  the  tape  subsystems  that  read  and  transfer  the 
data  change  at  a  much  faster  rate. 

Although  applications  vary,  most  companies  should 
overhaul  their  tape  systems  every  10  to  15  years.  Check 
to  make  certain  that  the  new  devices  efficiently  work 
with  old  tapes.  Also,  every  15  to  20  years,  bring  all 
your  archived  data  onto  newer  tape,  choosing  data 
formats  that  abide  by  industry  standards  to  better  en¬ 
sure  future  compatibility. 

Born  in  an  IBM  lab  back  in  1952,  tape,  it  seems,  will 
never  die.  ©  49686 
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Being  vigilant  helps  avoid  surprises, 
in  SANs  as  in  life. 


There  are  probably  things  happening  right  now  on  your  SAN  that  could  lead  to 
appalling  performance  or  a  complete  system  crash. 

You  don't  know  when  it  will  happen. 

You  don’t  know  how  it  will  happen. 

But  when  it  does  happen,  you’ll  wish  you  were  aware  things  were  building  up  to  give 
you  a  nasty  surprise,  an  expensive  surprise. 

Research  shows  that  SAN  downtime  can  cost  organizations  $100,000  per  minute, 
or  more.*  Finisar’s  NetWisdom  and  Xgig  solutions  help  you  avoid  these  costs  by 
monitoring  your  SAN  to  stop  degradation,  CRC  errors  and  events  that  impact  your 
most  critical  applications,  business  data  and  transactions. 

View  our  web  seminar,  including  a  customer  case  study  and  demo  of  NetWisdom 
by  visiting  www.finisar.com/plan 

Avoid  nasty  surprises.  Monitor  your  SAN  and  hang  on  to  your  budget. 


F  inis  a  r 


Finisar  has  been  speeding  up  networks  and 
delivering  best-of-breed  products  and  testing 
solutions  since  1988.  NASDAQ:  FNSR. 


Source:  Fabric  Computing:  Beyond  the  N-tier  Data  Center,  RBC  Capital  Reports  Oct  2003 


www.finisar.com/pian 
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Every  year  the  prestigious  American 


(ASBPE)  selects  one  publication  with 
80,000  or  more  subscribers  to  receive 
this  top  honor.  The  award  can  go  to  any 
business  publication  in  any  industry 
category,  and  we  won!  We  are  proud 
that  our  ongoing  commitment  to 
editorial  integrity,  audience  focus 
and  in-depth  coverage  has  been 
recognized  by  this  auspicious  award. 
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Luckily,  We  Are  Too! 


itcareers.com  is  now 

powered  by 
CareerJournal.com! 

Search  for  jobs  and  post 
your  resume  here  on 
www.itcareers.com 

or  call:(800)  762-2977 


Bally  Gaming  +  Systems  is 
seeking  a  Director  of  Research 
&  Development  for  the  MindPlay 
product  group  in  its  Las  Vegas 
NV  office.  The  Director  will  man¬ 
age  and  develop  all  aspects  of 
software  development  for  Bally's 
advanced  table  games  manage¬ 
ment  technology  group.  This 
group  utilizes  an  artificial  intelli¬ 
gence  hardware/software  sys¬ 
tem  that  utilizes  an  embedded, 
high-speed  image  processing 
and  computer  vision  compo¬ 
nents.  Bally  requires  qualified 
applicants  to  be  "hands-on" 
managers  who  will  help  define 
the  overall  architectures,  specif¬ 
ic  interfaces  and  functionalities 
of  Bally's  system.  This  includes 
both  leading  and  assisting  elec¬ 
trical,  mechanical  and  software 
engineers  in  developing  advanc¬ 
ed  mathematical  algorithms  and 
software  specifications  and  lan¬ 
guage  for  the  optical  hardware 
and  computer  vision  software 
used  in  Bally's  system.  The 
applicant  must  be  able  to  partic 
ipate  in  the  development  of  the 
system  software.  Qualified  appli 
cants  must  have  a  U.S.  Bachel¬ 
or's  Degree  or  equivalent  in 
Computer  Science,  Engineering 
or  a  related  field,  plus  seven 
years'  of  progressively  more 
responsible  experience  in  in- 
depth  object  recognition,  com¬ 
puter  vision,  algorithm  develop¬ 
ment  and  imaging  hardware 
design  for  dynamic  environ¬ 
ments.  Gaming  experience 
required.  For  consideration, 
please  send  your  resume  to: 

Bally  Gaming  +  Systems 
ATTN:  Director  of 
Technology  Recruiting 

6601  S.  Bermuda  Road 
Las  Vegas.  NV  89119-3606 


Information  Systems  Manager 

-  Reqs:  BS  degree  in  Info  Sys¬ 
tems  or  related  field.  2-yrs  exp  in 
related  occupation.  Exp.  to 
include  Network  &  Database 
Admin,  ERP  Admin,  Computer 
Programming  (Client/Server  & 
Web),  IS  Supervision  in  discrete 
mfg  environmt.  Proficiency  & 
exp.  w/  the  following  or  similar 
s/w:  Win2k  Svr,  Linux/Unix 
SLMail/Exchange,  BackupExec 
Symantec  AV,  ASP,  HTML, 
iHTML,  Frontpage.  VFP,  Access 
Thorough  knowledge  &  exp.  in 
ERP  modules  incl:  Distribution, 
Mfg,  Fin.,  &  integration  of  ERP 
modules  w/  3rd  party  s/w 
Duties:  Dev.  IT  strategies  to  sup¬ 
port  co.  goals:  recommend  req 
h/w  &  s/w  upgrades;  work  w/ 
dept.  mgrs.  to  implement  I.S. 
apps;  Coord,  w/  vendors  for 
acquisition  of  products  &  ser¬ 
vices;  Implement  max.  network 
&  Internet  availability;  Ensure 
max. network  &  data  security; 
Maintain  user  network  accts; 
Assign  user  permissions  to  net¬ 
work  resources;  Setup  &  main¬ 
tain  network  printers  &  servers; 
Troubleshoot,  repair,  &  deploy 
apps  on  client  PC's;  Admin,  mail 
server,  network  anti-virus,  & 
RDBMS;  Perform  systems  an¬ 
alysis  &  design;  Develop  VFP 
apps;  Provide  technical  &  func¬ 
tional  support  for  existing  ERP 
s/w;  Dev.  new  ERP  prog,  which 
supports  co.  Lean  Mfg;  Dev.  web 
apps  &  assist  in  improving  exist¬ 
ing  co.  website;  Integrate  exist¬ 
ing  apps  w/  web  apps  &  create 
programs  to  synchronize  web 
data  w/  in-house  data;  other 
duties  as  assigned.  Send 
resume  to:  HRD,  Bullfrog  Inti, 
668  W  14600  S,  Bluffdale,  UT 
84065. 


AS/400  LEAD  OPERATOR 


AS/400  Specialist  responsible 
for  daily  system  operations,  soft¬ 
ware  releases,  implementation 
security;  admin  &  developing 
documentation.  Train  operators. 
Req  Business  Recovery  and 
management  skills.  Job  located 
in  Miami,  FL.  Supervise  6  em¬ 
ployees;  Bachelor  Degree 
Computer  Sciences  or  equiv 
educ  &  exp;  2  yrs  exp.  in  the  job 
offered  or  2  yrs  exp.  as  a  A/S 
400  System  Operator;  $44,080 
per  yr;  9:00am-5:30pm;  40  hr 
wk.  Send  resume  to  Agency  for 
Workforce  Innovation,  Re: 
JOFL-2565132,  P.O.  Box  10869, 
Tallahassee,  FL  32302. 


IT  PROFESSIONALS 
Manager 

(Glen  Mills,  Pennsylvania  and  other  locations  through  the  U.S.). 
Coordinate,  design  and  implement  technology  enabled  business  solu¬ 
tions  involving  integration  of  ERP/CRM  applications  such  as  Oracle  and 
Siebel  through  Tibco.  Function  as  an  integrator  between  business  needs 
and  technology  solutions,  leading  the  architecture  of  the  technical  solu¬ 
tions  by  creating  process  flows,  designing  documents,  and  developing 
and  implementing  test  scenarios.  Diagnose  client/technical  issues,  man¬ 
age  projected  time-lines  to  effectively  deliver  interfaces  according  to 
deadline.  Lead  team  of  consultants  and  provide  them  with  direction  and 
advice  on  design  of  documents,  building  interfaces,  testing  and  deploy¬ 
ment.  Serve  as  a  mentor  to  the  team  members  in  technologies  such  as 
Oracle  ERP,  Siebel  CRM,  Tibco  Adapters,  Oracle  PL/SQL,  SQL,  Java, 
C++,  and  Integration  Managers.  Manage  day-to-day  client  relationships 
at  peer  client  level.  Engage  in  overall  project  analysis  by  assessing  pro¬ 
jected  timetables,  project  expectations  and  available  financial  and  human 
capital  resources.  Participate  in  proposal  development  and  sales  pre¬ 
sentations  involving  Enterprise  Application  Integration  (EAI)  using  Tibco, 
and  Enterprise  Resource  Planning  (ERP)  applications  such  as  Oracle 
ERP. 

The  wage  offered  is  $102,000  per  year.  The  work  schedule  is  Monday- 
Friday,  9:00  am  to  5:00  pm.  The  minimum  requirements  are  as  follows 
Bachelors  degree  or  equivalent  in  Mechanical  Engineering  or 
Engineering  +  5  years  of  experience  in  the  job  offered  or  5  years  of  expe¬ 
rience  as  a  Manager,  Senior  Consultant,  Consultant  or  Associate 
Consultant.  Employer  will  regard  a  foreign  degree  to  be  equivalent  to  a 
U.S.  Bachelor's  degree  as  determined  by  an  accredited  credentials  eval¬ 
uation  service.  Related  experience  must  include  at  least  three  years  of 
Java,  SQL  and  C++  programming  languages  and  at  least  one  year  of  EAI 
Solutions  Middleware,  Tibco  middleware,  Oracle  ERP,  Oracle  PL/SQL 
and  Siebel  CRM. 

Please  send  your  resume  or  CV,  referencing  Job  Order  Number 
WEB460739  to  the:  PA  Careerlink,  701  Crosby  Street,  Suite  B  Chester 
PA  19013-6096.  EOE. 


Oracle  Applications  Database  Administrator,  Provide  production  support 
DBA  services  for  Global  Oracle  Applies,  v.  1 1 .0.3  running  on  SUN  Solaris, 
incl  all  ERP  &  CRM  modules;  provide  production  support  for  Oracle  9i 
D/base  support  for  Red  Hat  N/work  &  Red  Hat.com  running  on  Red  Hat 
Linux  7.2,  provide  DBA  services  for  Oracle  11  i  upgrade,  incl  migrating 
11.0.3  to  11i  &  switching  from  SUN  Solaris  to  Linux,  &  upgrading  Oracle's 
RDBMS  (Relational  Database  Management  System)  from  8.1.7  to  9i  &  9i 
applies  server;  migrate  &  support  Oracle  Applic  Servers  on  Apache  Web 
Server;  upgrade  &  patch  current  Oracle  Applies  using  Oracle's  std  tool 
set;  monitor  &  tune  Oracle  Applies  SQL  to  improve  performance  in  pro¬ 
duction  &  dvlpmt  envrmts;  monitor  &  adjust  growth  of  Oracle  d/bases;  pro¬ 
vide  DBA  support  for  Oracle  Applies  Dvlpmt  group  &  Red  Hat  N/work 
engrs;  dvlp,  implmt  &  support  reporting  envrmt  that  enables  Red  Hat 
employees  to  perform  data  mining  on  Red  Hat  data.  Req:  Bach  (or  equiv) 
in  Comp  Engg  or  Comp  Sci;  3  yrs  in  job  offd  or  3  yrs  as  S/ware 
Engr/Oracle  Applies  DBA;  I)  Min.  3  yrs  of  1)  Oracle  Applies  DBA  exp  on 
SUN  Solaris  or  Sequent  Dynix  systms.  incl  installation  &  implmtn  of  ERP 
&  CRM  modules,  d/bases  &  servers;  2)  Oracle  Applies  Patching;  3)  Exp 
creating  &  tuning  SQL  &  PL/SQL  scripts;  4)  Exp  in  d/base  backup  &  recov¬ 
ery  procedures,  d/base  creation,  &  DBA  maintenance  tasks  w/Orade 
Applies,  5)  Exp  w/Oracle  Applies  advanced  performance  &  applies  tuning 
&  Unix  shell  scripting;  II)  Min.  2  yrs  of  exp  performing  upgrades  &  migra¬ 
tions  of  Oracle  Applies  systms  from  9.4.2.  to  11i  &  Oracle  Applies  d/base 
upgrades  from  7.x  to  current  release;  III)  At  least  1  yr  practical  exp 
w/HTML  &  JSP.  Also  reqd:  Willingness  &  ability  to  provide  24/7  on-call 
support,  telephonically  &  in-person,  in-house  &  at  client  sites,  on  alternate 
wks.  Hrs:  40+;  Salary:  $  85K/yr.  Interested  applicants  apply  at  nearest 
Employment  Security  Commission  office  or  send  resume  to  Employment 
Security  Commission,  3351  Carl  Sandburg  Ct,  Raleigh,  NC  27610.  All 
resumes  &  applications  must  incl  SS#  &  refer  to  JO#  NC7251711  &  DOT 
code  039.162-010. 


SYSTEMS  ENGINEER  (Tampa 
FL)  -  Resolve  systems  design  & 
implementation  problems  for 
international  clientele  in  accor¬ 
dance  with  company  standards 
&  practices.  Initiate  &  provide 
conceptual  solutions  to  satisfy 
new  &/or  changing  business 
rqments.  Provide  technical  eval 
uations  of  hardware,  software  & 
tools  &  procedures  utilizing 
COBOL,  Easytrieve,  JCL  &  DB2 
Determine  the  impact  on  pro¬ 
posed  changes  on  system  archi¬ 
tecture  &  provide  technical  solu¬ 
tions  to  meet  documented 
requirements  within  schedule 
Identify,  recommend  &  docu¬ 
ment  effective  design  method¬ 
ologies  &  tools  to  be  utilized  dur¬ 
ing  the  design,  coding,  testing, 
implementation  &  installation 
phases.  Monitor  system  perfor¬ 
mance  to  identify  areas  that 
need  improvement.  Position 
requires  a  Bachelor's  Degree  in 
Bus.  Admin  or  Comp.  Info. 
System,  oral  &  written  fluency  in 
Spanish  &  Portuguese  &  2  yrs  of 
exp  in  the  job  offered  or  as  an 
Engineer,  Programmer  or  An¬ 
alyst.  2  yrs  of  exp  must  include 
exp  with  data  processing  using 
COBOL,  Easytrieve,  JCL  &  DB2. 
M-F,  9-5,  40  hrs/wk.  $71,500/yr. 
Submit  resume  to  Agency  for 
Workforce  Innovation,  PO  Box 
10869,  Tallahassee,  FL  32302- 
0869,  Job  Order  FL-2563128. 


Senior  Programmer  Analyst  -  At 
Quest  Diagnostics,  Inc,  we've 
become  the  nation's  most  re 
spected  name  in  diagnostic  test¬ 
ing  by  focusing  on  integrity,  in¬ 
novation  and  quality.  We've  cre¬ 
ated  an  environment  where  ded 
icated  professionals  can  learn 
grow  and  advance  -  all  in  an 
atmosphere  of  pride.  We’re  cur¬ 
rently  seeking  a  Senior  Pro¬ 
grammer  Analyst  to  be  based  in 
Lyndhurst,  NJ.  Candidate  will 
perform  overall  design  &  archi¬ 
tecture  for  IDAA  computer  sys¬ 
tem  for  order  entry  &  processing 
of  clinical  lab  tests.  Code,  de¬ 
sign,  test,  document  &  maintain 
IDAA  (Oracle/UNIX).  Utilize  iLog 
rules  and  CHARVA  to  program 
JAVA  nClasses  for  user  inter¬ 
faces.  Reqt's:  Bachelor's  degree 
in  Comp.  Sci.,  Electronics,  or 
related  field,  and  5  yrs  exp 
Software  Development.  Exp. 
must  include  5  yrs  exp  with 
JAVA,  UNIX,  Oracle  and  n-tier 
architecture  of  business  info 
processing  systems,  and  exp 
with  CHARVA  and  iLog  Rules. 
EOE/M/F/D/V.  Please  add 
source  code:  41625  and  forward 
your  resume  to  Email: 
Charlene.  R.Tronr.elliti@nuest 


diaanostics.com  or  Fax:  610- 


650-2056. 
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System  Analyst.  Two  positions 
open.  Oversee  computer  system 
reqs  at  company  that  compiles 
int'l  trade  data  into  proprietary 
s/w-based  systems  to  conduct 
data  analyses.  Monitor  WAN/ 
LAN  for  bandwidth  usage,  traffic 
pattern,  &  security  loop-hole. 
Perform  security  patch,  s/w 
upgrade,  backup,  &  user  sup¬ 
port.  Maintain  CISCO  Routers, 
Switches,  PIX  Firewall,  Fiber 
optical  module,  Gigabit  network 
setup,  &  PowerVault/SAN  stor¬ 
age  solution.  Be  avail,  after- 
hours  in  emergency.  Configure 
Firewall,  DNS,  &  VPN;  set  up 
iMail  &  Anti-Spam  s/w,  Norton 
Virus  Scan,  Windows  Active 
Directory,  PDC,  BDC,  &  security. 
Assist  in  dev.  Store  Procedure  & 
Triggers.  Maintain  multiple  high 
avail,  and  perf.  databases  (con¬ 
sisting  of  int'l  trade  data  w/diff. 
currencies  &  trade  terminology). 
Implement  Microsoft  SQL  Secur¬ 
ity,  linked  server,  log  shipping, 
reporting  services,  &  server  farm 
configuration.  Assist  in  s/w  test¬ 
ing  &  client  support.  Prereqs: 
Bach,  in  computer  sci.,  comput¬ 
er  eng,  or  related  field,  PLUS  2 
yrs  in  job  offered  OR  2  yrs'  in 
computer  system  administration 
or  database  design.  Post  grad, 
ed.  in  computer  sci.  or  computer 
eng.  may  substitute  up  to  2  yrs' 
prereq  exp.  Competitive  Salary. 
Job  Location:  Columbia,  SC. 
Respond  to:  Global  Trade 
Information  Services  Inc.;  ATTN: 
R.  Locklear;  DOL-JK-1;  2218 
Devine  St;  Columbia,  SC  29205. 


BCCUSA,  Inc  -  South  Portland, 
ME  needs  experienced  Pro¬ 
grammer  Analyst  having  a  Bach¬ 
elors  Degree  with  minimum  two 
years  of  progressive  work  expe¬ 
rience  in  developing  Sybase 
applications  using  Sybase/ASE 
12.5/12/11.5,  T-SQL.  Actuate 
and  MQ  Series.  Should  have 
experience  in  performance  tun¬ 
ing  of  Stored  Procedures  and 
SQL  queries  using  Showplan  & 
Statistics  I/O.  Should  have  expe¬ 
rience  in  writing  scripts  using 
Unix  Shell  and  PERL  to  auto- 
mize  day  to  day  manual  pro¬ 
cess.  Must  have  used  utilities 
like  BCP,  DEFNCOPY,  FTP. 
Prefer  experience  in  Database 
backup  and  restore.  Competi¬ 
tive  salary  and  benefits.  M-F,  40 
hours/week.  Please  mail  your 
resume  to  BCC  USA  Inc.,  HR 
Department,  650  Main  Street 
Suite  201,  South  Portland,  ME  - 
04106. 


Programmer  for  sys.  analysis, 
d/zn.,  &  dev.  of  large  enterprise 
applns.  w /  d/base  &  internet 
tech.  Use  obj.  oriented  d/zn  & 
structured  sys.  analysis  &  d/zn., 
s/w  dev.  &  intgm.  on  multiple 
CPU  servers.  S/W  dev.  w/ 
J2EE,  Java,  XML,  DTD,  Perl, 
PHP4,  C,  Pro*C,  Socket  &  Shell 
program,  on  UNIX.  Sys.  integrn. 
on  Sun's  1280  servers  w / 
SAML,  Weblogic,  iplanet  web 
servers.  D/base  d/zn  &  prog,  in 
Oracle  us/ng  SQL  &  PL/SQL. 
Intgm.  of  Kenan’s  billing  w / 
ISP's  op/n.  supp.  s/w.  Intgm  of 
external  a/c  agg.  s/w  w /  online 
bnkg.  s/w.  BS  in  CS  +  2  yr  exp. 
m  job  duties.  Comp,  salary. 
Apply:  Unilinx  -  Code  RV,  4625 
Alexander  Dr.,  #110,  Alpharetta, 
GA  30022  with  proof  of  perm. 
W/k  authzn. 


Fixed  Income  Analytics  Integra¬ 
tion  Developer,  Wachovia  Sec¬ 
urities,  Charlotte.  Provide  tech¬ 
nological  and  analytical  support 
to  primary  trading  areas.  Reqs. 
MA  in  Math  or  Eng.  2  yrs  exp.  in 
pos.  offered  or  as  a  Software 
Developer,  Information  Technol¬ 
ogy  Officer,  or  Mathematician. 
The  2  yrs  exp.  must  incl.  work 
developing  and  integrating  ana¬ 
lytics  for  capital  markets  trading. 
1  yr.  exp.  must  incl.  work  with 
Java,  relational  databases  and 
object  oriented  design.  M-F,  8- 
5,  Send  resume  to  Meredith 
Elberson,  Wachovia  Corp.,  401 
South  Tryon  Street,  15th  Floor, 
Charlotte,  NC  28288-0475.  No 
phone  calls. 


Software  Engineer  sought  by  D- 
T-H  satellite  television  company 
in  Littleton,  CO  to  work  in  Engle¬ 
wood, CO  &  other  unanticipated 
job  sites  in  the  U.S.At  a  senior 
level  engage  in  full  life-cycle 
software  development  of  manu¬ 
facturing  &  financial  software  ap¬ 
plications  in  a  client/server  envi- 
ronment.The  applications  incor¬ 
porate  the  ORACLE  relational 
database  management  system 
&  operate  using  UNIX,  Windows 
or  DOS  operating  systems.  An¬ 
alyze  requirements;  create  de¬ 
signs;  code,  test,  debug,  modify 
&  implement  the  software  appli¬ 
cations.  Create  documentation 
&  provide  customer  support  as 
needed. Maintain  existing  appli¬ 
cations  &  systems,  including  up¬ 
grading  applications.  Utilize  PL/ 
SQL,  ShellScript  &  Developer 
2000  in  designing  &  developing 
the  software  applications.  Re¬ 
quires  a  bachelor's  degree  or 
foreign  equivalent  in  computer 
science  or  related  field.  2  years 
experience  completing  full  life- 
cycle  software  development  of 
applications  in  a  client/server 
environment  which  incorporates 
the  ORACLE  relational  data¬ 
base  management  system  &  us¬ 
ing  PL/SQL,  ShellScript  &  Dev¬ 
eloper  2000-type  tools.  8AM- 
5PM,  M-F;  $75, 000/year.  Res¬ 
pond  by  resume  to:  Employment 
Programs,  PO  Box  46547, 
Denver,  CO  80202  &  refer  to  job 
order  No.  CO5094561. 


COMPUTER  GRAPHIC 

ARTIST/ILLUSTRATOR 

Design  &  create  computer  gra¬ 
phics;  paint  illustrations  &  hand 
sketches  for  web  sites  &  market¬ 
ing  material;  design  logos  & 
other  digital  imaging  /  print  work. 
Create  animated  objects  &  char¬ 
acters  using  hand  drawing  & 
sketching  for  products  &  service 
presentation.  Req.  exp  in  fine 
arts,  graphic  design  &  3D  ani¬ 
mation  to  support  internal  mar¬ 
keting  &  Web/Internet  efforts. 
Exp  in  setting  printer  services; 
Job  located  in  Fort  Lauderdale; 
Bachelor  in  Graphic  Design  or 
equiv  educ  &  exp;  2  yrs  exp.  in 
the  job  offered;  $21 .55  per  hour; 
9:00am-5:00pm;  40hr  wk.  Send 
resume  to  Agency  for  Workforce 
Innovation,  Re:  JOFL-  2565636, 
PO.  Box  10869,  Tallahassee,  FL 
32302. 


Senior  Java  Web  Developer, 
Wachovia  Corp.,  Charlotte,  NC. 
Responsible  for  Java  dvlp.  on 
authentication  and  hosting  dvlp. 
team  using  standard  dvlp.  life 
cycle  methodology  on  projects. 
Reqs.  BA  Info.  Systems  or  Eng. 
&  3  yrs  exp.  in  position  offered  or 
as  a  Software  Developer,  Pro¬ 
grammer,  or  Software  Eng.  The 
3  yrs  exp.  must  incl.  Java  dvlp. 
using  J2SE  and  J2EE  on  Win¬ 
dows  and  UNIX  platforms,  work 
with  Oracle,  SQL,  C/C++,  devel¬ 
oping  N-tier  Java  appl.  for  appl. 
servers  (i.e.  WebSphere,  Web- 
Logic,  iPlanet)  and  SDLC  meth- 
odolog  and  work  with  cryptogra¬ 
phy  tools.  M-F,  8-5,  Send  res¬ 
ume  to  Randall  Buck,  Wachovia 
Corp.,  1525  West  W.  T.  Harris 
Blvd.  Bldg.  3A1,  Charlotte,  NC 
28262.  No  phone  calls. 


IT  Financial  Analyst  needed 
to  provide  account  mgmt, 
sales  &  bus  dvlpmt, 
resource  staffing  &  out¬ 
sourcing,  product  dvlpmt  & 
mgmt  of  large,  mission-criti¬ 
cal  IT  projects;  build  &  man¬ 
age  multi-million  $  portfo¬ 
lios;  conduct  presentations. 
Resume  to:  Global  Con¬ 
sultants,  Attn:  Hireme,  25 
Airport  Rd,  Morristown,  NJ 
07960 


Computer  Professionals 
(Multiple  Openings) 

Software  Engineer/Systems 
Analysf/Database  Administra- 
tor/Network  Administrator, 
Milwaukee,  Wl.  Must  have 
bachelors  degree  or  equiva¬ 
lent  and  experience  in  some 
of  the  following  skills:  C/C++, 
Java,  Web  Methods,  Cold  Fus¬ 
ion,  Microsoft  Technologies  (Vis¬ 
ual  Basic,  .NET,  ASP)  CRM 
(Siebel,  Clarify,  Vantive),  Middle 
Ware  Technologies  (Orbix,  Cor- 
ba,  Tibco,  Vitria)  Data  Ware 
Housing  Tools  (Informatica, 
Data  Stage,  Abinitio,  Business 
Objects,  Cognos,  Micro  Strate¬ 
gy,  Brio)  ERP  (SAP,  People  Soft, 
Oracle  Apps,  Baan),  Mainframe 
(Cobol,  CICS,  JCL,  VSAM)  AS- 
400,  Ecommerce,  Databases 
(SQL  Server/Oracle/DB2/Sy- 
base),  Microsoft  Windows  (95/ 
98/NT/2000, Exchange),  UNIX 
(Sun  Solaris,  HP,  AIX),  Linux 
and  QA  (Win  Runner,  Load  Run¬ 
ner,  Silk,  Quickpro,  Manual  Test¬ 
ing).  Position  requirement: 
Must  be  willing  to  travel  and 
/or  relocate  per  project  speci¬ 
fication. Mail  your  resumes  to: 
iobs@iksolutionsinc.com. 

or 

Human  Resource  Director 
IK  Solutions  Inc. 

1 840  N.  Farweii  Ave,  Suite  #  306 
Milwaukee,  Wl  53202 


Programmer  Analyst.  Sought  by 
Englewood  Colorado  consulting 
company  to  work  in  various  un¬ 
anticipated  locations  throughout 
the  U.S.  Duties:  Analyze,  plan, 
develop,  test  and  document 
computer  programs  including 
business  and  database  server 
applications.  Evaluate  user  re¬ 
quests  and  software  program 
requirements  for  new  and  modi¬ 
fied  programs.  Write  specifica¬ 
tions,  code,  test  and  debug  com¬ 
puter  programs.  Analyze  and 
design  databases  within  an 
application  area.  Use  of  SQL 
Server,  PL/SQL,  Visual  Basic, 
ASP,  XML,  Crystal  Reports, 
Oracle  and  Windows  NT.  Reqs. 
Bachelor  or  equivalent  in  Com¬ 
puter  Science,  Business  Admin¬ 
istration;  Management  Informa¬ 
tion  Systems  or  related  field. 
Plus  1  year  in  the  job  offered  or 
1  year  in  a  related  occupation, 
including  Consultant,  Application 
Developer.  $55, 744/year,  40/hrs 
/wk,  8:00AM-5:0QPM.  Respond 
by  resume  to  WORKFORCE 
DEVELOPMENT  PROGRAMS, 
PO  Box  46547,  Denver,  CO 
80202,  and  refer  to  Job  Order 
No.  CO5093663. 


Senior  Programmer/Analyst  Re¬ 
sponsible  for  design,  develop¬ 
ment,  analysis,  test,  implemen¬ 
tation  and  maintenance  of  GUI 
of  FLiCA  (Flightline  Internet 
Crew  Access)  for  different  air¬ 
lines  under  client/server,  web- 
based  and  wireless  environ¬ 
ments  using  C++,  CGI  Script, 
Delphi,  DHTML,  JavaScript, 
Transact  SQL  stored  procedure, 
multiple-threaded  application 
and  object-oriented  program¬ 
ming  under  windows  98/2000/ 
XP/NT;  Requirements:  A  self¬ 
starter  who  is  able  to  work  inde¬ 
pendently  with  minimum  super¬ 
vision;  Bachelor  Degree  of 
Computer  Science  or  a  related 
field  with  five  or  more  years  of 
equivalent  work  experience. 
Working  Hours:  40hours/week; 
Salary:  $67500/year.  Send  res¬ 
ume  to:  Mr.  Jeff  Copelan  at: 
Flightline  Data  Services,  Inc., 
404  Line  Creek  Drive,  Suite  4, 
Peachtree  City,  GA  30269. 


Leading  software  development 
company  seeks  software  engi¬ 
neers.  Qualified  applicants  must 
have  Masters  degree  or  (US 
equiv)  in  Computer  Science, 
Computer  Information  Systems 
or  Computer  Engineering,  at 
least  2  years  experience  in  posi¬ 
tion  offered  or  as  a  Software 
Developer,  Software  Analyst, 
Systems  Analyst  or  Technical 
Architect  and  experience  with 
Java,  J2EE,  .NET,  Clarify,  ERP, 
Oracle,  Rational  Rose  and  Unix. 
Qualified  applicants  send  res¬ 
ume  and  salary  requirements  to 
Princeton  Information,  Ltd., 
13200  Metcalf  Ave,  Ste  260, 
Overland  Park,  KS  66213.  Attn: 
JF. 


SAP  Consultant  needed 
w/2  yrs  exp  in  computer 
programs  using  MM, 
SD,  FI,  CO,  CRM,  BW 
modules  in  SAP  R/3 
w/Oracle  on  Unix  & 
Windows  as  the  presen¬ 
tation  server  employing 
Rapid  Application  Dev¬ 
elopment  (RAD)  & 
Object  Oriented  Meth¬ 
odologies.  Mail  resumes 
to:  Technisoft  Inc.  1279 
Colts  Lane,  Yardley, 
PA19067. 


SOFTWARE  CONSULTANT 

Analyze  &  evaluate  existing  or 
proposed  software  systems. 
Dvlps,  implements  &  improves 
progs.,  sys.  &  related  proce¬ 
dures  to  process  data  using  in- 
depth  knowledge  of  software 
dvlpmnt  life  cycle.  Encodes, 
tests,  debugs  &  installs  operat¬ 
ing  progs.  &  other  sys.  software 
utilizing  ERP  Package  software 
(incl.  MFG/PRO,  SYMIX  &  Pro¬ 
gress)  as  well  as  the  Progress 
4GL  programming  language. 
Bachelor's  degree  (or  equiv.)  in 
Comp.  Sci.,  Math,  Engnrg,  Bus. 
or  Commerce  +  2  yrs  exp.  in 
position  offered  or  as  a  Software 
Engnr,  Prog.  Analyst  or  Sys. 
Analyst  reqd.  Exp.  must  inch  (a) 
ERP  Package  software  incl. 
MFG/PRO  or  SYMIX,  (b) 
Progress  Database  &  Progress 
4GL,  (c)  Oracle/RDBMS,  &  (d) 
UNIX  Systems.  High  mobility 
preferred.  40  hrs/wk,  OT  as 
reqd,  8  am  -  5  pm,  $66,730/yr. 
Submit  resume  to:  Mon  Valley 
Regional  CareerLink,  Donora 
Industrial  Park,  570  Galiffa 
Drive,  Donora,  PA  15033-1385. 
Refer  to  Job  Order  No.  WEB 
462523. 


COMPUTERS  -  SENIOR  SYST¬ 
EMS  ADMINISTRATOR  -  Finan¬ 
cial  Management  firm  seeks 
Senior  Systems  Administrator  to 
manage,  maintain  and  upgrade 
Solaris/Unix-based  network’s 
central  backup  system,  including 
STK  L6000  library  with  STK 
9940B  tape  drives.  Duties  in¬ 
clude  installation/maintenance 
of  the  batch  system  PBS  and  of 
Solaris/Linux  systems;  central 
LDAP  service;  internal  company 
webservice;  central  CUPS- 
based  print  service;  user  sup¬ 
port  and  security.  Master's 
degree  in  Computer  Science  or 
Computer  Studies  and  2  years 
exp.  in  job  duties  required.  Will 
accept  candidates  with  2  years 
experience  as  Systems  Adminis¬ 
trator  of  high  speed  networks  in 
UNIX  environment.  Mail  resume 
to  RTC,  600  Route  25A,  East 
Setauket,  NY  11733,  Attn:  JR. 


Analyst/Project 
Programmer,  Lead 

The  Medical  College  of  Wiscon¬ 
sin  is  seeking  an  analyst/project 
programmer,  lead  for  its  Bioen¬ 
gineering  and  Biotechnology 
Centerto  develop  techniques  for 
analysis  of  data  from  microarray 
and  proteomics  experiments. 
Candidates  must  possess  a 
Master’s  degree  in  computer 
science,  computing,  bioinformat¬ 
ics  or  related  and  have  knowl¬ 
edge  of  microarray  data  analysis 
using  Singular  Value  Decompo¬ 
sition,  Statistical  Modeling  of  Mi¬ 
croarray  Data,  and  programming 
using  MATLAB  software.  Three 
years  of  prior  experience  as  a 
software  engineer  or  computer 
programmer  is  also  required. 
To  apply  send  cover  letter  and 
resume  to  Medical  College  of 
Wisconsin,  Employment  Office- 
JMC1018,  8701  Watertown 

Plank  Rd.,  Milwaukee,  Wl 
53226,  fax:  414-456-6502. 


Senior  Client  Server  Develop¬ 
er/Analyst.  Code  business  log¬ 
ic,  GUI  Interfaces  and  database 
interfaces  using  database  spe¬ 
cific  languages.  Design  and 
develop  GUIs  and  screens  (e.g. 
develop  screen  application  tem¬ 
plates;  design  windows,  dia¬ 
logues,  menus  and  toolbars  for 
complex  processes  and  work- 
flows).  Develop  and  coordinate 
the  testing  process  from  small 
application  releases  or  complex 
software  enhancements.  Re¬ 
search  and  recommend  prod¬ 
ucts  and  new  technologies  for 
the  client/server  environment. 
Req.  a  Bach.  Deg.  Or  equiv.  in 
Comp.  Sci.,  Eng.,  Math  or  a 
related  field,  and  2  yrs  of  exp.  in 
the  job  offered,  Software  Appli¬ 
cations,  Develop,  and/or  soft¬ 
ware  eng.  Qualified  candidate 
must  have  at  least  2  yrs  exp.  in 
interface  screen  design/develop, 
and/or  client/server  program¬ 
ming  develop.  Job  located  in 
Jacksonville,  FL.  $85,267/yr.  40 
hrs/wk,  M-F,  9am  -  5pm.  Send 
resumes  to:  Agency  for  Work¬ 
force  Innovation,  Ref:  FL- 
2562153,  P.O.  Box  10869, 
Tallahassee,  FL  32302. 


Software  Engineer:  For  co.  spe¬ 
cializing  in  mktg  &  mnfg  of  com¬ 
puter  software,  design,  code, 
implement  &  test  complex  prod¬ 
uct  enhancements.  This  incl¬ 
udes  researching  new  feature's 
concepts  &  establishing  plans  & 
coordinating  them;  analyze 
problems  &  suggest  innovative 
solutions;  design  &  test  plans; 
train  &  review  design  work  of 
programmers.  Reqs:  Bachelors 
or  equivalent  w /  computer  relat¬ 
ed  coursework  incl.  operating 
systems,  programming  lan¬ 
guages,  computer  application 
development.  3  yrs  exp  in  job 
offered  or  3  yrs  of  programming 
exp.  Exp  must  incl.  Software 
Configuration  Mgmt,  incl.  devel¬ 
oping  &  supporting  version  con¬ 
trol,  defect  mgmt,  change  con¬ 
trol,  Release  Engineering,  Rat¬ 
ional  Clearcase  version  control, 
Multisite,  VOB/View  mgmt.  Pro¬ 
ficiency  in  PERL  Scripting, 
BATCH  Scripting,  Triggers, 
Make,  ClearMake,  Omake, 
UNIX,  Linux,  Windows. 
40hrs/wk.  Send  res.  R-4,  P.O. 
Box  17182,  Phila.,  PA  19105. 


ImageVision.Net,  Inc.  seeks 
Computer  Programmer  in  our 
Middletown,  PA  loc.  Analysis  & 
design  of  software-based  solu¬ 
tions  using  scripting  languages 
in  web  environ.  &  latest  dev.  lan¬ 
guages.  Software  testing  &  doc¬ 
umentation.  Understand  &  ad¬ 
here  to  project  plans.  Use 
Oracle  and  System  Develop¬ 
ment  Lifecycle  process  &  tools 
including  NT  based  web  tech¬ 
nologies,  IE  5.0  and  Netscape 
4.72  browsers,  HTML,  DHTML, 
VB  Script,  Java  applet,  CGI/BIN, 
ASP  and  XML.  Must  have  Bach¬ 
elor  in  Comp.  Science,  Bus. 
Information  Systems,  or  related 
+  6  months  relevant  experience. 
Resume  to  Carolyn  Smith, 
ImageVision.Net,  inc.,  Twelve 
Oaks  Center,  1801  Oberlin 
Road,  Middletown,  PA  17057. 


Software  Engineer  III.  Develop, 
operate,  maintain  distributed 
software  systems;  lead  team  of 
programmers  developing  soft¬ 
ware  projects;  utilize  MS  SQL  to 
program  &  manage  database 
applications;  perform  software 
costing;  use  3D  programming  to 
build  web  applications.  Require¬ 
ments:  Masters  in  Comp.  Sci.  or 
related  field  PLUS  3  yrs.  exp.*  in 
job  or  as  Software  Engineer/ 
Programmer  inc!.  2  yrs.  using 
MS  SQL  &  3D  programming.  *ln 
lieu  of  Masters  &  3  yrs.  exp.,  will 
accept  Bach,  in  Comp.  Sci  or 
related  field  plus  5  yrs.  exp.  in 
job  or  as  Software  Engineer/ 
Programmer  incl.  2  yrs.  using 
MS  SQL  &  3D  programming. 
Send  CV  to  Tietronix  Software 
Inc.,  attn:  HR,  1331  Gemini, 
#300,  Houston,  TX  77058, 
fax:  281-461-9350,  email: 
info@tietronix.com. 


Senior  SAP  Computer  Systems 
Analyst  (National  Placement) 
Must  be  able  to  analyze  systems 
supporting  business  processes, 
design  solutions  using  SAP  R/3 
4.6C,  perform  configuration,  tes¬ 
ting,  develop  programs  using 
ABAP  to  meet  business  require¬ 
ments,  develop  interfaces  using 
EDI,  IDocs,  BAPIs,  perform  sys¬ 
tem  validations.  Must  have  mini¬ 
mum  5  years  of  strong  function¬ 
al  experience  in  customizing, 
implementing  SAP  R/3  Logistics 
-  MM/WM,  IM,  LIV,  Procure¬ 
ment,  A P,  AR,  MRP,  PP  and 
Batch  Management.  Thorough 
understanding  of  SD,  FI  &  expe¬ 
rience  in  integrating  SAP  R/3 
with  i2  TMx  suite  of  products  is 
required.  4  yr  Bachelor  Degree 
in  Management,  Engineering, 
Computer  Science,  Mathemat¬ 
ics,  MIS,  CIS  or  Foreign  Equiva¬ 
lent  required.  $100,000/yr,  40 
hrs/wk,  9a  -  6p.  Send  resumes, 
listing  Job  Order  #  WEB461166 
to  Site  Manager,  Beaver  County 
CareerLink,  2103  Ninth  Avenue, 
Beaver  Falls,  PA  15010-3957. 


Computer  Network  Engineer 
sought  by  computer  networking 
design  company  in  Greenwood 
Village,  CO  to  work  in 
Greenwood  Village  and  other 
unanticipated  job  sites  in  the 
U.S.  Under  dose  supervision, 
performs  moderately  complex 
tasks  in  the  design  and  installa¬ 
tion  of  data  communication 
servers  and  networks  running 
TCP/IP  on  Windows  NT/2000  or 
Unix  platforms.  Implements  net¬ 
work  servers  and  hardware  uti¬ 
lizing  Active  Server  Pages, 
QPSK  telecommunication  dev¬ 
ices  and  hardware  level  pro¬ 
gramming  for  network  chipsets. 
Requires  bachelor's  or  foreign 
equivalent  in  electrical,  electron¬ 
ics  or  computer  engineering;  1 
yr  exp  performing  the  core 
duties  and  utilizing  the  technolo¬ 
gies  described  above.  M-F; 
8am-5pm;  $45,00G/yr.  Respond 
by  resume  to  Employment 
Programs;  PO  Box  46547, 
Denver,  CO  80202  and  respond 
to  JON  CO5092241 


Intercall,  Inc.  has  five  openings 
for  Software  Engineers  to  lead 
teams  to  design,  develop  prod¬ 
ucts  for  the  telecom  industry 
using  VB,  Power  Builder,  De¬ 
veloper  2000,  Seagate  Crystal, 
Java,  XML,  HTML,  OOP,  OOD, 
Oracle,  Sybase,  system  archi¬ 
tecture  and  programming  on 
Unix,  Windows  NT  platforms; 
analyze  business  processes  to 
determine  requirements  which 
conform  to  overall  strategic  plan 
and  provide  operations  support; 
train  end  users  and  team  mem¬ 
bers.  Require  MS  (or  foreign 
equiv)  in  CS/Engineering  (any 
branch)/related  field  &  1  yr  exp 
in  IT  or  BS  (or  foreign  equiv)  in 
one  of  the  above  fields  with  3  yrs 
exp  in  IT.  F/T.  Competitive  sal¬ 
ary.  Travel  involved.  Resumes  to 
HR,  Intercall,  Inc.,  1211  O.G. 
Skinner  Drive,  West  Point,  GA 
31833.  Please  refer  Job 
ICI09Q4. 
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Computer  Systems  Analyst  III, 
Wachovia  Corp.,  Charlotte,  NC 
Administer  Argo  ECS  4.0  sys¬ 
tem  and  serve  as  Mid-tier  Type 
Architecture.  Reqs.  BA  in  Info. 
Tech,  and  2  yrs  exp.  in  pos. 
offered  or  as  a  Network  Tech. 
Consult.  The  2  yrs  must  incl. 
exp.  networking  GUI  for  existing 
mainframe  and  data  in  a  fin 
institution  (i.e.  ARGO/Bankpro) 
and  work  designing  &  imple¬ 
menting  a  mid-tier  architecture 
platform  &  troubleshooting  net¬ 
work  problems  w /  Ethernet,  IP 
and  SNA  protocals,  switches, 
routers  and  probes. M-F,  8-5, 
Send  resume  to  Jane  Higgins, 
Wachovia  Corp.,  401  S.  Tryon 
Street,  27th  Floor,  Charlotte,  NC 
28288-0475.  No  phone  calls. 


Purchaser  wanted  by  a 
computer  components 
company  in  Holbrook,  NY  to 
purchase  computer  chips 
and  other  components  for 
resale.  3  yrs  related  exp. 
req'd  and  must  be  familiar 
with  overseas  supply 
sources.  Resume  only  to 
CMB  Components,  Inc., 
630  Broadway  Avenue, 
Holbrook,  NY  11741;  Attn: 
Peter  Castellama. 


Programming  Instructor  De¬ 
velopment  special  teaching 
programs  for  refreshment 
courses.  Borland  Interbase 
MU  I  Development,  MS  Ac¬ 
cess,  VB,  Delphi,  PL/SQL, 
ODBC,  Win2000/XP.B.S.  in 
C.S.  Provide  User  train¬ 
ing, database  troubleshoot¬ 
ing,  perform  buckup  and 
recovery  procedures.  Res¬ 
ume  A-soft  Scientific,  P.O. 
Box  1270,  Roswell,  GA 
30077. 


Programmer/Analyst 

Leominster,  MA  -  Plan,  dev, 
test  &  doc  comp  sftwr  for 
MRPII/  ERP  using  Win  CE, 
wireless  netwk,  embedded 
visual  studio,  pocket  PC, 
Borland  C++,  RPG,  ASP, 
XML,  HTML,  COM,  DCOM, 
VB,  Java,  PL/SQL  w/MS  SQL 
Server  &  DB2  db’s.  Bach¬ 
elor's  degree  in  Comp  Sci. 
Min  2  yrs  exp.  Send  resume 
to:  Director  of  IT,  Alpha  Wire 
Co.,  711  Lidgerwood  Ave, 
Elizabeth,  NJ  07207 


Programmer  Analysts  to  design, 
develop,  test,  implement  appls 
using  Siebel  tools,  C,  C++,  Java. 
ASP,  Oracle,  JavaScript.  VB¬ 
Script,  HTML,  JDK,  JDBC,  Visu¬ 
al  Basic,  etc  using  UNIX  and 
Windows  OS;  develop,  enhance 
components  of  new/existing 
appls  and  databases;  perform 
reqs  gathering,  analysis,  plan¬ 
ning,  testing,  implementation  & 
troubleshooting.  Require:  BS  or 
foreign  equiv  in  CS  or  Engg(any 
branch)  with  2  yr  exp  in  IT.  High 
salary.  F/T  position.  Travel 
involved.  Resume  to  HR,  Smart- 
soft  International,  Inc.,  3965 
Johns  Creek  Court,  Ste  500, 
Suwanee,  GA  30024. 


Programmer  Analyst  (Multiple 
Positions)  needed  w/2  yrs  exp  to 
design,  develop,  deploy  &  man¬ 
age  applications,  design  backup 
&  fault  tolerant  solutions  using 
Designer,  Visio,  OEM,  Rational 
Rose,  PVCS,  TOAD,  SQL, 
PL/SQL,  Shell  programming 
with  Oracle  &  SQL  Server  as 
RDBMS  on  Windows  &  Unix. 
Mail  res  to:  Empower 

Technology  Solutions  Inc.,  120 
Quarry  Dr.,  2nd  Fir,  Milford,  MA 
01757. 


[ 

■ 


enterprise  integration 
network  vulnerabilities 
corporate  data  security 
government  compliance 
mobile  &  wireless  security 
business  management  needs 

The  right  IT  professional 
can  jump  the  hurdles  of 
today  s  IT  challenges. 

Call: 

(800)  762-2977 


Computers-Programmer 
/Analysts  needed.  Seek¬ 
ing  qual.  candidates  pos¬ 
sessing  BS  or  equiv. 
and/or  rel.  work  exp.  Part 
of  the  req.  relevant  exp. 
must  include  2  yrs.  work¬ 
ing  with  ClearPath  I XI 
2200,  SSG  &  DEPCON. 
Fwd.  resume  &  ref.  to: 
Vennsys,  LLC,  Attn:  HR, 
5440  Willow  Rd.,  #117, 
Waunakee,  Wl  53597. 


DBAs  to  install,  configure,  main¬ 
tain  Oracle  Appls  and  Oracle 
Dev.  software;  evaluate,  design 
existing/proposed  Oracle  db 
structures/systems,  analyze  da¬ 
tabase  reqs  of  existing/new 
appls;  monitor  performance, 
tune,  backup/recovery  strategy 
planning,  and  troubleshoot 
problems;  maintain  security  of 
databases  Require  BS  or  for¬ 
eign  equiv.  in  CS  or  Engg  (any 
branch)  with  2  yrs  exp  in  data¬ 
base  admin.  Comp,  salary.  Tra¬ 
vel  involved.  F/T  openings  in 
Elgin,  IL  &  Lower  Gwynedd,  PA 
Resume  to:  HR,  Fourth  Tech¬ 
nologies,  Inc.,  585  Tollgate 
Road,  Suite  1,  Elgin,  IL  60123 
Specify  location  desired,  JobID 
DB964  on  resume. 


Hetrosys,  LLC,  based  in  Detroit, 
Ml  seeks  Applications  Database 
Administrators  and  Sr.  Prog¬ 
rammer  Analysts  for  Detroit  and 
nationwide  opportunities.  App¬ 
lications  DBA  requires  bache¬ 
lor's  in  computer  science,  4  yrs 
exp.  as  DBA  and  working  knowl¬ 
edge  of  Kintana  and  Tick  Mark. 
Programmer  Analyst  positions 
require  3  yrs  exp.  customizing 
and  extending  Oracle  e- 
Business  suite  of  applications 
and  working  knowledge  of 
Oracle  Work  Flow  Development 
Tool.  Apply  via  U.S.  Mail  with 
resume  to  Hetrosys,  LLC,  3757 
S.  Baldwin  Road,  #223,  Lake 
Orion,  Ml  48359. 


Seeking  qualified  applicants  for 
the  following  positions  in  Mem¬ 
phis/Collierville,  TN:  Senior  Pro¬ 
grammer  Analyst.  Formulate/ 
define  functional  requirements 
and  documentation  based  on 
accepted  user  criteria.  Require¬ 
ments:  Bachelor's  degree*  or 
equivalent  in  computer  science, 
MIS,  engineering  or  related  field 
plus  5  years  of  experience  in 
systems/applications  develop¬ 
ment.  Experience  with  COBOL, 
IMS  and  DB2  also  required. 
‘Master's  degree  in  appropriate 
field  will  offset  2  years  of  gener¬ 
al  experience.  Submit  resumes 
to  Jay  Boane,  FedEx  Corporate 
Services,  40  FedEx  Parkway, 
2nd  Floor  Horizontal,  Collierville, 
TN  38017.  EOE  M/F/D/V. 


Web  Developer  needed 
w/Bachelors  Degree  or 
Foreign  Equivalent  &  2  yrs 
exp  in  web  application 
using  MTS,  MSMQ,  COM/ 
DCOM/COM+.  C++,  SQL 
Server,  Crystal  Reports, 
DB2  Mainframe,  Visual 
StudioNET.  ASP.NET, 
ADO.NET,  C#  &  VB.NET. 
Domestic  travel  is  req’d. 
Mail  Resumes  to:  Open 
Systems  Technologies, 
Inc.  8  Winter  Street,  6th 
Floor,  Boston,  MA  02108. 


Clutchpoint  delivers  innovative 
IT  solutions,  has  openings  for 
experienced  Prog/Systems  An¬ 
alysts,  S/W  Engineers  with  any 
of  following  skills:  Oracle,  Sy¬ 
base.  SQL,  C/C++,  Visual  C++, 
OOD,  Java,  Web  Tech,  UNIX, 
NT.  VB,  ASP.  HTML.  SAP, 
Peoplesoft  ERR  Send  resumes 
to  iobs@clutchDoint.com.  EOE 

Techgene  Solutions  has  open¬ 
ings  for  Software  Engineers  or 
other  IT  staff.  Candidates  must 
have  BS/MS  with  experience. 
Prefer  skills  in  Cobol,  JCL, 
Oracle,  SQL,  VB,  C/C++  Travel 
may  be  required  for  some  posi¬ 
tions.  Competitive  salary.  Please 
apply  at  bapujik@yahoo.com. 
No  calls.  EOE. 


Technical  Software  Consulting, 
Inc.  seeks  software  engineers  or 
system/programmer  analysts  or 
DBA  to  develop  system  applica¬ 
tions  for  clients.  Minimum  re¬ 
quirement  is  BS/MS  with  IT 
experience.  Competitive  wage 
with  full  benefits,  sponsor  H-1/ 
green  card.  Send  resumes  to 
hr@tsc-inc.com  EOE. 

Multiple  openings  for  IT  profes¬ 
sionals  by  Z3  Technologies  to 
design  and  customize  applica¬ 
tions.  Travel  may  be  required. 
Candidates  must  have  BS/MS 
with  exp.  Following  skills  prefer¬ 
red:  Oracle,  Sybase,  SQL 
C/C++,  Visual  C++,  OOD,  Java, 
Web  Tech.  Please  contact 
info@z3technoloaies  mm  EOE 


Software  Engineer  sought  by 
comp  services  Co  specializing  in 
Magic  Software  to  dvlp,  implmt, 
test,  document  &  support  cus¬ 
tomers.  As  Co.  is  supporting 
other  Magic  dvlprs,  Enhanced 
Magic  knowl  is  necessary.  Must 
have  Bach  &  5  yrs  exp  w/Magic 
prgmg  incl  version  9.4.  Must 
have  exp  w/HTML,  Java  Script, 
MS-SQL,  Oracle,  Web-services. 
Resume  to  Ronen  Canetti, 
Owner,  WizMagic,  LLC  4024 
Radford  Ave.,  Bldg  2,  Rm  201, 
Studio  City,  CA  91604. 


Software  Engineer  w/bach  or 
foreign  equivalent  in  Comp. 
Sci  or  Engg.  or  Math  +  1  yr 
exp  in  Java,  Servlets,  JSP, 
EJB,  XML.  JavaScript,  ASP. 
Visual  Basic,  SQL  Server 
database,  create  data  ware¬ 
house  and  client  server 
applic.  using  Oracle,  PL/SQL 
as  ETL  &  Business  Objects  as 
OLAP  Reporting  Tool.  Mail 
res:  eBusinesscorp  Inc.  209 
West  Central  Street,  Suite 
106,  Natick,  MA  01760. 


Software  Engineers 
Sybor  Technologies  Inc. 
seeks  qualified  Software 
Engineers.  Bachelors  de¬ 
gree  required  with  experi¬ 
ence  in  developing  and 
implementing  programs 
using  SYBASE  ECMAP 
and  SYBASE  Adaptive 
Server  Enterprise.  Reply 
by  mail  to:  3506  Highway 
6  South,  #249,  Sugar 
Land,  TX  77477. 


Software  Engineer  needed 
w/MS  in  Comp.  Sci.  or  Engg. 
or  Math  &  1  yr.  exp  in  s/w 
applications  using  VB  on 
Windows.  Customizing  Test 
Director  using  C++,  Jasmine 
ii,  Uni-Center  TNG,  HL7  & 
DICOM,  WinRunner,  SMS  & 
mathematical  modeling  using 
MatLab,  Maple  &  S-Plus.  Exp 
prior  to  MS  degree  accept¬ 
able.  Mail  Resumes  to: 
EBusinesscorp  Inc,  209  West 
Central  Street,  Suite  106, 
Natick,  MA  01760. 


Netrion  Corp.  seeks  multiple 
Systems  Analysts  to  dsgn,  dvlp, 
customize,  implmt,  &  support 
Peoplesoft  applies  for  clients. 
Eval  client's  business  process 
needs,  dvlp  specs  &  setup 
Peoplesoft  HRMS  applic  mod¬ 
ules.  Conduct  data  conversion, 
testing,  dsgn,  documentation  & 
perform  related  duties.  Travel 
reqd.  Associates  deg  in  sci  or 
engg  related  study  is  reqd  w/2 
yrs  related  exp.  Send  resume  to 
Netrion  Corp.,  380  S  Schmale 
Rd,  Ste  202,  Carol  Stream,  IL 
60188. 


System  Analyst.  Perform  comp¬ 
uter  system  analysis  &  program¬ 
ming  to  meet  client's  business 
requirements;  design  &  implem¬ 
ent  computer  data  networks  in¬ 
cluding  install  &  configure  net¬ 
work  equipment;  work  on  Spect¬ 
rum  Element  Manager  Network 
Management  System;  use  BP- 
CS  6.2,  AS/400,  RPG/400,  RP- 
GLE  &  AS/SET,  OS/400,  Win  NT 
4.0,  VAX/VMS  5.2  &  variants  of 
UNIX.  Req:  Bachelor  or  equiva¬ 
lent  (accept  3-yr  college+PG 
diploma  as  equiv),  6-month  exp 
as  Programmer/Analyst  or  IT 
Consultant.  40hrs/wk.  8-5pm, 
$48k/yr.  Send  resume  to:  Emp¬ 
loyment  Security,  32  S.  Main  St 
Concord,  NH  03301-4857,  Re: 
2004-469.  Employer  paid  ad. 


Jr.  Programmer  Analyst.  Dvlp, 
create,  &  modify  computer  app. 
s/w  incl.  Oracle  databases  & 
new  versions  of  the  Oracle 
RDBMS.  Design  security  for  all 
of  the  Oracle  Databases. 
Coordinate  database  dvlpmt. 
create  &  design  logical  &  physi¬ 
cal  models  for  the  OLTP  &  OLAP 
appl.  using  tools  incl.  Erwin, 
Oracle  Designer.  Assist  in 
designing  the  Datamarts  & 
Datawarehouses  using  Kimballs 
&  Inmons  methodologies.  Req: 
BS  in  Engineering  plus  2  yrs. 
exp.  Sal:  Open.  40hrs/wk. 
Job/Interview  Site:  Des  Moines, 
IA.  Send  resume  to  Chuck 
Gutta.  Emprise  Consulting  LLC 
@  200  E  Sandpointe  Ave,  Suite 
725,  Santa  Ana  ,  CA  92707 


Software  Engineer 
(Applications)  utiliz¬ 
ing  CAD/CAM  in  San 
Jose  @  $81  k/yr. 

Travel  w/in  US  req. 
40%  of  the  time.  Mail 
to  Micronic  Laser 
Systems,  Inc,  1922 
Zanker  Rd.,  San 
Jose,  CA  95112  or 
fax  (408)  392-2261. 


Computer  Programmer 
Wanted 

To  code,  test,  and  document 
computer  programs  using 
JAVA,  JSP,  Java  script,  Py¬ 
thon,  SQL,  FreeBSD,  Solaris, 
Windows  2000  server  on  MS 
SQL  Server  2000  and  MySQL 
databases.  Req.  BS  or  foreign 
equiv.  in  CS,  Engineering,  or  a 
related  field  and  proficiency  in 
Java,  JSP,  MySQL,  FreeBSD, 
and  Solaris.  40hrs/wk  Fax 
resume  to  HR,  Experclick,  Inc. 
at  805-456-0166.  Ref.  Code: 
CA-JL. 
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Systems  Integrator  II:  Deliver 
complex  Interactive  Voice 
Response  software  applications 
for  customers  purchasing  com¬ 
pany  network  products.  Assist 
account  teams  in  understanding 
customer  needs,  assist  w/solu- 
tion  design,  document  proposed 
solution  in  statement  of  work, 
develop  acceptance  criteria, 
project  plan  &  time  estimate. 
Interview  customer's  end  users 
to  gather  detailed  requirements, 
produce  &  gain  customer  accep¬ 
tance  of  functional  specifications 
document  &  design,  develop, 
integrate,  test,  install  &  place 
solution  in  production  at  cus¬ 
tomer's  location.  Support  cus¬ 
tomer  throughout  acceptance 
period  as  well  as  train  them  on 
solution  administration.  Provide 
knowledge  transfer  of  solution 
architecture  &  administration  & 
problem  diagnosis  &  resolution. 
Work  &  support  company  man¬ 
agement,  product  specialists, 
projects  managers  &  fellow 
associates.  M-F  40h/w.  $79,600/ 
yr.  B.S.  in  CS  or  Engineering  +  5 
yrs  exp  in  job  offered  or  5  yrs 
exp  as  Software  Eng.  Exp  must 
include  2  yrs  exp  in  Interactive 
Voice  Response  Systems, 
strong  development  &  system 
administration  skills  in  various 
Unix  platforms.  Must  possess 
knowledge  &  understanding  of 
call  center  technical  environ¬ 
ment,  computer  telephony  inter¬ 
face  technologies,  Text-To- 
Speech,  Speech  Recognition, 
PBX  &  Adjuncts.  Please  forward 
resumes  to:  Agency  for 
Workforce  Innovation,  P.O.  Box 
10869,  Tallahassee,  FL  32302. 
Pis.  reference:  JOFL#:  2565435 


Millennium  Software,  Inc.  has 
opportunities:  Programmers,  Sy¬ 
stems  Analysts,  Software  Engin¬ 
eers,  Consultants,  DBAs,  Archi¬ 
tects  and  Project  Managers  with 
4  or  more  skills  in  following  envi¬ 
ronments:  Java,  J2EE,  COM/ 
DCOM,  EJB,  Shell  Scripts,  SAS, 
PLC,  Textra,  XML,  SQL,  mq- 
PCX,  PowerBuilder,  Rational 
Rose,  Relational  Databases, 
Perl,  SAP,  Primavera  Team  Play 
/  P3e,  Teradata,  MQ-Series, 
IMS,  Adabase,  Natural,  Web¬ 
sphere,  Oracle  Workflow,  Filenet 
eprocess,  Floware  Workflow 
engine,  C/C++,  HTML,  Visual- 
Basic,  COBOL,  DCEDFS,  Auto¬ 
CAD,  Six-Sigma,  ASP.net,  Mer¬ 
cury  Test  Tools,  SMS,  TCP/IP 
Veritas,  Tivoli.  B.  S.  or  M.S.  de¬ 
gree  &  1-2  yrs  exp  reqd.  depen¬ 
ding  on  position  We  also  accept 
the  foreign  edu.  equiv.  Or  any 
suitable  combination  of  edu, 
training  or  exp.  Frequent  travel 
and  relocation.  Send  confiden¬ 
tial  resume  and  salary  require¬ 
ments  to.  2000  Town  Center,  Ste 
300,  Southfield,  Ml  48075.  Visit 
our  website  at: 
www. webmsi.com. 


PROGRAMMER/ANALYST  to 
analyze,  design,  develop,  test, 
enhance  and  maintain  web- 
based  and  client/server  applica¬ 
tion  software  for  the  insurance 
industry  using  Java,  C/C++, 
Java  Script,  Oracle,  JDBC, 
J2EE,  JSP,  Servlets,  EJB,  XML, 
Struts,  UML,  SSL,  Tomcat  Ser¬ 
ver  and  TCP/IP  under  Windows 
98/2000/NT/XP,  DOS  and  UNIX/ 
Linux  operating  systems.  Re¬ 
quire:  B.S.  degree  in  Computer 
Science,  an  Engineering  disci¬ 
pline,  or  a  closely  related  field 
with  2  yrs  of  exp  in  the  job 
offered;  A  M  S.  with  a  demon¬ 
strated  ability  to  perform  the 
stated  duties  gained  through 
academic  coursework/previous 
work  experience  will  be  accept¬ 
ed  in  lieu  of  the  B.S.  and  2  yrs  of 
exp.  Competitive  salary  offered. 
Send  resume  to:  Infinity  Prop¬ 
erty  &  Casualty  Corp.,  P.O.  Box 
444,  Birmingham,  AL  35209; 
Fax  at  205-803-8406;  or  E-mail 
at  Jobs@ipacc.com;  Attn:  Job 
ZD 


Infinite  Computing  Systems  a 
Cedar  Rapids,  Iowa  Company  is 
seeking  qualified  computer  pro¬ 
fessionals.  Current  positions 
available  must  meet  the  follow¬ 
ing  requirements.  All  positions 
require  at  least  a  Bachelors 
degree  (3  year  fgn  Bachelor 
degrees  are  acceptable).  We 
may  have  additional  positions 
available  in  addition  to  the  ones 
listed.  Multiple  positions  are  like¬ 
ly  available  in  some  positions. 
Candidate’s  salary  offered  rela¬ 
tive  to  experience  and  skills. 
Candidates  must  be  willing  to 
relocate  and  travel  as  needed. 

A  variety  of  positions  are  avail¬ 
able,  which  require  between  1-5 
years  of  experience  in  the 
below-listed  skills.  Certain  posi¬ 
tions  may  require  a  Masters 
degree. 

•  Java,  HTML,  XML,  Weblogic 
or  Websphere 

•  Expeditor,  Cobol,  DB2,  JCL, 
IDMS  or  IMS 

•  ERP  (e.g.  SAP,  Peoplesoft  or 
Oracle  Apps) 

•  Visual  Basic,  SQL,  ASP.net, 
SQL  Server 

•  Easytreive,  QMF,  Cobol, 

CICS,  SAS,  TSO/ISPF 

•  C,  C++,  GUI,  Oracle  or 
Informix  or  Sybase 

Please  send  resume  and  cover 
letter  to:  Raj  Inani,  President, 
Infinite  Computing  Systems, 
Inc.,  230  2nd  Street  -  Ste  214, 
Cedar  Rapids,  IA  52401 . 


SYSTEMS  ENGINEER  III  - 
SYSTEMS  ANALYSIS  &  PRO¬ 
GRAMMING  -  (Temple  Terrace, 
FL)  -  Provide  conceptual  &  tech¬ 
nical  solutions  to  complex  busi¬ 
ness  or  technical  problems. 
Develop  &  implement  standards 
&  verify  results.  Provide  techni¬ 
cal  expertise  in  operating  sys¬ 
tems  &  applications  systems  in 
the  telecommunications  indus¬ 
try.  Design  &  develop  business 
process  automation  systems  for 
the  telecommunications  industry 
on  client-server  architecture. 
Provide  technical  solutions  to 
meet  documented  requirements 
within  schedule.  Identify,  rec¬ 
ommend  &  document  effective 
design,  coding,  testing  imple¬ 
mentation  &  installation  phases. 
Utilize  Rational  Apex  tools, 
PL/SQL,  Oracle,  Kenan  Arbor 
BP  &  Unix.  Position  requires  a 
Bachelor's  degree,  or  the  equiv., 
in  Computer  Sci,  Info.  Tech,  or 
Eng  (any)  &  5  yrs  of  exp.  in  the 
position  offered  or  as  an  Engin¬ 
eer,  Programmer  or  Analyst.  The 
5  yrs  of  progressive  exp.  must 
include  some  experience  using 
Rational  Apex  tools,  PL/SQL, 
Oracle,  Kenan  Arbor  BP  &  Unix. 
As  equivalent  to  a  Bachelor's 
degree,  the  employer  will  accept 
a  degree  or  combination  of  edu¬ 
cation,  training  &  experience 
that  has  been  determined  by  a 
credential  service  to  be  equiva¬ 
lent  to  a  U.S.  Bachelor's  degree 
from  an  accredited  U.S.  institu¬ 
tion  of  higher  learning.  40hrs/ 
wk,  9  -5,  M-F,  $71 ,400/yr.  Sub¬ 
mit  resume  to  Workforce  Pro¬ 
gram  Support,  PO  Box  10869, 
Tallahassee,  FL  32302-0869. 
Job  Order  FL-2562442. 


PROGR  ANALYSTS/DESIGN 
ENGINEERS:  des,  dev  bus  & 
engg  RDBMS  based  & 
PLM/PDM  applns  such  as 
Metaphase, Windchill,  etc.  BE 
or  ME  in  CE,  Mech,  EE  or  rel 
w/1-5  yrs  exp  in  skills  such  as 
Oracle,  SQL.Pro*C,  PL/SQL, 
C,  C++,  Java,  VB,  Unix,  XML, 
UML  tools,  IDE,  CAD/CAM. 
Multiple  positions  in  Detroit  & 
other  sites.  Mail  res  to  HR, 
33533  West  12  Mile  Rd, 
#131  .Farmington  Hills,  Ml 
48331. 


Software  engineer  to  design,  de¬ 
velop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of  des¬ 
ign;  direct  software  system  test¬ 
ing  procedures  using  expertise 
in  Visual  Basic,  Oracle,  C  and 
C++.  Requirements:  Bachelor's 
Degree,  educational  or  function¬ 
al  (3  years  experienced  year  of 
college)  equivalent,  in  Engineer¬ 
ing,  Computer  Science  or  relat¬ 
ed  field  and  two  years  experi¬ 
ence  as  a  software  engineer  or 
computer  programmer,  knowl¬ 
edge  of  Visual  Basic,  Oracle,  C 
and  C++.  Salary:  $70, 242/year. 
Working  Conditions:  8:00  A.M. 
to  5:00  P.M.,  40  hours/week,  in¬ 
volves  extensive  travel  and  fre¬ 
quent  relocation.  Apply:  Arm¬ 
strong  County  CareerLink,  Attn: 
CL  Program  Supervisor,  1270 
North  Water  Street,  PO  Box  759, 
Kittanning,  PA  16201,  Job  No. 
WEB462126. 


INFORMATION  TECHNOLOGY 
Member  Technical  Staff,  Soft¬ 
ware.  Req.  Bachelor’s  degree 
(or  equiv.  foreign  edu.)  in  Comp. 
Science  or  Eng.  and  4  yrs.  of 
experience  in  the  job  offered  or 
4  yrs.  of  experience  in  systems 
software  engineering,  including 
device  driver  development  and 
crash  dump  analysis.  2  yrs.  of 
stated  experience  must  include 
performing  Fibre  Channel  analy¬ 
sis,  troubleshooting  of  storage 
solutions,  and  utilizing  shell 
scripts,  C,  SCSI  and  SAN. 
Perform  systems  software  engi¬ 
neering,  including  device  driver 
development  and  crash  dump 
analysis.  Send  resumes  to:  M. 
Thorpe,  Job  Reference  #00222, 
Network  Appliance,  Inc., 375 
Totten  Pond  Road,  3rd  Floor, 
Waltham,  MA  02451-2010. 


Luceo,  Inc.  seeks  Programmer 
based  out  of  our  Naperville,  IL 
loc.  Code,  test,  implement, 
maintain  SAP  R/3  +  BW  pro¬ 
grams.  Use  Bus.  Perf.  Mgmt, 
Bus.  Modeling,  Metadata  Mgmt, 
Data  extraction,  transformation, 
loading,  Query  Design,  Report¬ 
ing,  Web  App.  Design,  BW  Perf 
Mgmt  &  BW  Admin,  SAP  BW 
Integration,  SAP  BW  data  loads, 
SAP  BW  system  landscape  & 
object  transport  proc,  SAP  Bus. 
Explorer  (BEx),  SAP  BW  in 
Oracle  environ.  Some  travel 
required.  Must  have  Bachelor 
Engineering  or  related  +  2  yrs 
relevant  exp.  Resume  to  Luceo, 
Inc.,  1431  Kallien  Avenue,  Nap¬ 
erville,  IL  60540. 


PROGRAMMER  ANALYSTS 
needed.  Analysis,  program  & 
evaluate  web  based  applications 
using  Java,  Java  Development 
tools  &  Active  Server  Pages 
(ASP).  Bachelors  required  in 
Math,  Computers,  Engineering 
or  any  other  related  fieid  of 
study,  plus  two  years  of  experi¬ 
ence  in  the  job  duties  described 
above.  Various  unanticipated 
work  locations  throughout  U.S. 
Assignments  generally  4-10 
months  duration.  Salary 
$65,000.00/yr.  for  a  40  hour 
work  week.  Submit  to  PA 
Careerlink,  1260  New  Rodgers 
Road,  Bristol,  PA  19007.  Refer 
to  Job  Order  #WEB-461364. 


PROGRAMMER/ANALYST 

Programmer/analyst  needed 
with  experience  in  software 
analysis,  gather  requirements, 
design,  develop  and  test  the 
software  applications.  Experi¬ 
ence  in  COM,  MTS,  ODBC, 
SAP,  ABAP,  WML,  Oracle,  SQL 
server,  J2EE,  JSP,  EJB,  COMTI, 
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Microsoft’s  Fixes  Seek  to  Stop  Remote  Attacks 


Continued  from  page  1 

Patches 


them  trickle  in  randomly 
throughout  the  day,  week  and 
month.” 

David  Krauthamer,  director 
of  information  systems  at  Ad¬ 
vanced  Fibre  Communica¬ 
tions  Inc.  in  Petaluma,  Calif., 
said  Microsoft  appears  to 
have  become  much  more 
aware  of  the  heavy  burden 
that  patching  systems  puts  on 
IT  managers.  He  added  that  a 
regular  patching  schedule  re¬ 
duces  much  of  the  instability 
that  results  from  intermittent 
releases  and  eases  the  chal¬ 
lenge  of  keeping  up  to  date 
on  patches. 

“What  it  gives  you  is  the 
consistency  you  need  to  factor 
patching  into  your  overall 
[systems  management]  proc¬ 
ess,”  Krauthamer  said.  “It’s  a 
great  thing  if  you  can  spend 
just  one  night  a  month  doing 
patches.” 

From  a  systems  administra¬ 
tion  standpoint,  the  predict¬ 
ability  of  the  monthly  releases 
has  made  it  “much  easier”  to 
manage  the  patching  of  Win¬ 
dows-based  machines,  said 
Mike  Tindor,  vice  president  of 
network  operations  at  First  In¬ 


ternet  Inc.,  an  Internet  service 
provider  in  St.  Clairsville,  Ohio. 

Debbie  Fry  Wilson,  director 
of  marketing  at  Microsoft’s  Se¬ 
curity  Response  Center,  said 
the  shift  from  an  ad  hoc  patch 
release  process  to  a  weekly 
schedule  and  then  to  the 
monthly  one  was  driven  by 
feedback  from  users  who  said 
they  “were  not  able  to  plan 
well  because  they  didn’t  know 
in  advance  when  we  would 
have  patches  for  them.” 

Deeper  Testing 

The  policy  of  releasing  patch¬ 
es  on  the  second  Tuesday  of 
each  month  has  also  given  Mi¬ 
crosoft  more  time  to  work  on 
improving  the  quality  of  its 
fixes  and  to  do  a  “deeper  level 
of  testing”  in  the  patch  devel¬ 
opment  stage,  Wilson  said. 

Even  so,  users  and  analysts 
cited  some  ongoing  concerns 
with  the  patching  process. 

Microsoft’s  growing  habit  of 
grouping  together  multiple  se¬ 
curity  fixes  in  large  patches 
can  increase  the  testing  bur¬ 
den  for  IT  managers,  said  Russ 
Cooper,  an  analyst  at  TruSe- 
cure  Corp.,  an  IT  security  con¬ 
sulting  firm  in  Herndon,  Va. 

For  instance,  last  week’s 
crop  of  patches  included  one 
that  was  designed  to  fix  eight  I 


THE  FLURRY  OF  FIXES  Micro¬ 
soft  released  last  week  was 
aimed  at  plugging  nearly  two- 
dozen  security  holes,  the  most 
severe  of  which  could  allow  an 
attacker  to  take  complete  control 
of  an  affected  system  and  re¬ 
motely  execute  malicious  code. 

Four  of  the  newly  disclosed 
vulnerabilities  are  particularly 
dangerous  because  they  can  be 
remotely  exploited  by  malicious 
hackers,  according  to  an  adviso¬ 
ry  issued  by  Atlanta-based  Inter¬ 
net  Security  Systems  Inc. 

separate  vulnerabilities.  “Users 
should  get  used  to  the  idea  of 
being  snowed  under  on  ‘Patch 
Tuesday,’  ”  Cooper  said. 

A  monthly  schedule  can 
sometimes  also  expose  users 
to  longer  periods  of  risk,  said 
Andrew  Plato,  president  of 
Anitian  Corp.,  a  systems  inte¬ 
grator  and  consulting  firm  in 
Beaverton,  Ore.  “If  a  new  se¬ 
curity  flaw  is  discovered  right 
after  an  update,  waiting  30 
days  for  a  patch  is  too  long,” 
he  said. 

Tindor  said  that  if  informa¬ 
tion  about  a  security  flaw 


“What  concerns  me  is  that 
they  are  taking  such  a  long  time 
in  fixing  some  of  these  bugs,” 
said  Drew  Copley,  a  senior  re¬ 
search  engineer  at  eEye  Digital 
Security  Inc.,  a  vulnerability  man¬ 
agement  software  vendor  in  Al- 
iso  Viejo,  Calif. 

For  instance,  one  of  the  flaws 
disclosed  last  week  was  reported 
to  Microsoft  208  days  before  the 
patch  designed  to  fix  it  was  is¬ 
sued,  according  to  Copley. 

“That’s  a  long  time  to  expect 
that  no  one  else  is  going  to  find 

were  to  become  public  before 
the  next  monthly  patch  re¬ 
lease,  he  would  expect  Micro¬ 
soft  to  be  “proactive  in  push¬ 
ing  the  updates  quickly  rather 
than  waiting  to  release  them  at 
the  scheduled  time.” 

Stephen  Toulouse,  security 
program  manager  at  the  Mi¬ 
crosoft  Security  Response 
Center,  reiterated  that  the 
company  is  releasing  com¬ 
bined  fixes  in  response  to  re¬ 
quests  from  users. 

“We  have  heard  very  clearly 
from  customers  that  when 
there  is  an  opportunity  to  have 


out  about  it,”  he  said. 

Stephen  Toulouse,  security 
program  manager  at  Microsoft’s 
Security  Response  Center,  said 
some  patches  require  extensive 
testing  because  of  the  complexi¬ 
ty  of  the  vulnerabilities.  “One  of 
the  most  important  things  is 
quality,”  Cooper  said. 

The  total  number  of  flaws  dis¬ 
closed  last  week  came  close  to 
matching  the  22  security  vulner¬ 
abilities  that  Microsoft  released 
fixes  for  last  April. 

-JaikumarVijayan 

just  one  update,  that’s  what 
they  want,”  Toulouse  said, 
noting  that  Microsoft  tries  to 
combine  fixes  for  multiple 
flaws  found  in  the  same 
source-code  files. 

In  response  to  concerns 
about  users  being  exposed  to 
longer  periods  of  risk,  Wilson 
said  Microsoft  will  issue  out- 
of-cycle  fixes  if  the  situation 
warrants  it.  In  late  July,  for  in¬ 
stance,  the  company  rushed 
out  a  patch  after  an  active  ex¬ 
ploit  was  found  to  be  taking 
advantage  of  a  flaw  in  Internet 
Explorer.  O  50113 


EMC  Buys  Backup  Software  Vendor 


BY  LUCAS  MEARIAN 

EMC  Corp.  last  week  agreed 
to  acquire  Dantz  Development 
Corp.  in  an  effort  to  boost 
sales  to  the  small-business 
community  as  the  company 
continues  to  expand  its  soft¬ 
ware  portfolio. 

EMC  officials  said  that  Wal¬ 
nut  Creek,  Calif.-based  Dantz 
will  become  part  of  the  Enter¬ 
prise  Storage  Software  Group. 
The  deal  is  valued  at  less  than 
$50  million,  according  to  EMC. 

Observers  said  the  acquisi¬ 
tion  should  help  EMC  in  its 
competition  with  Veritas  Soft¬ 
ware  Corp.’s  BackupExec  soft¬ 
ware  and  Computer  Associ¬ 


ates  International  Inc.’s  Bright- 
Stor  ARCserve  backup  agent. 

Mark  Lewis,  executive  vice 
president  of  EMC’s  software 
group,  said  the  acquisition 
should  allow  the  company  to 
boost  its  offerings  for  small  to 
midsize  businesses.  In  addi¬ 
tion,  he  said,  Dantz’s  backup 
software  should  integrate  easi¬ 
ly  with  the  EMC  NetWorker 
backup  management  software 
produced  by  EMC’s  Legato 
division. 

Lewis  said  that  Dantz’s  Ret¬ 
rospect  backup  software  will 
be  sold  separately,  even  after 
it’s  integrated  with  NetWorker. 

Kevin  Money,  network 


supervisor  at  Iroquois  Gas 
Transmission  System  LP, 
whose  operation  has  been 
using  the  Dantz  Retrospect 
software  for  nine  years  to  back 
up  its  workstations,  servers 
and  field  offices,  said  he  wants 
to  know  what  EMC’s  plans 

is  [EMC 

buying  Dantz] 
for  its  infrastruc¬ 
ture,  its  patents  or 
for  its  licensing? 

KEVIN  MONEY,  NETWORK  SUPER¬ 
VISOR.  IROQUOIS  GAS  TRANSMISSION 


are  for  the  Dantz  operation. 

Shelton,  Conn.-based  Iro¬ 
quois  has  123  employees  and 
operates  a  412-mile  natural- 
gas  pipeline  that  runs  from  the 
U.S.-Canada  border  at  Wad- 
dington,  N.Y.,  to  Long  Island. 
Money  said  his  operation  has 
six  servers  that  run  the  Retro¬ 
spect  software  and  back  up 
about  2TB  of  data  nightly.  The 
backup  application  is  simple 
to  manage  and  works  across 
Windows,  Macintosh  and  Lin¬ 
ux  platforms,  he  said. 

Money  also  said  he  likes 
Dantz’s  licensing  structure, 
which  is  based  on  the  num¬ 
ber  of  servers  the  software 
is  running  on,  not  on  the  num¬ 
ber  of  individual  clients  that 
are  being  backed  up. 


He  expressed  concern 
about  EMC’s  plans  for  the 
Dantz  unit.  “Is  [EMC  buying 
Dantz]  for  its  infrastructure, 
its  patents  or  for  its  licens¬ 
ing?”  Money  said.  “The  only 
other  thing  I’d  be  questioning 
that  also  always  makes  people 
like  us  nervous  is  just  their  li¬ 
censing  [plans].” 

According  to  EMC,  there 
are  no  plans  to  change  the 
Dantz  licensing  schemes. 

The  company  said  that 
Dantz  will  continue  to  operate 
out  of  its  Walnut  Creek  facili¬ 
ties.  Current  President  and 
CEO  Larry  Zulch  will  continue 
to  oversee  the  Dantz  unit  and 
will  report  to  Lewis  and  Dave 
DeWalt,  co-leaders  of  EMC’s 
software  group.  ©  50108 
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IT  in  a  Jam 


IN  FRANCE  LAST  WEEK,  it  became  legal  for  movie  theaters  to 
use  electronic  jammers  to  block  cell  phone  use  during  shows. 
In  Mexico,  some  churches  recently  started  doing  the  same 
thing  during  religious  services,  even  though  jammers  are  ille¬ 
gal  there.  Police  in  the  U.S.  use  them  too,  especially  during 
hostage  standoffs.  That’s  a  violation  of  federal  law,  but  the  FCC  has 
never  taken  anyone  to  court  over  it.  Prisons,  the  Secret  Service,  the 
military  —  the  list  of  jammer  users  keeps  getting  longer. 

Hey,  if  they’re  using  jammers  to  solve  their  problems,  why  can’t 
we  use  them  to  deal  with  the  security  issues  created  by  cell  phones, 
Wi-Fi  and  other  wireless  technologies? 


It  sure  would  make  things  easier  for  us.  In¬ 
stead  of  constantly  monitoring  networks  to 
look  for  Wi-Fi  hubs  that  users  have  smuggled 
in,  we  could  just  shut  them  down  with  a  jam¬ 
mer.  We  could  block  cell  phones  in  conference 
rooms  and  jam  camera-equipped  phones  in  sen¬ 
sitive  areas  like  research  labs  (and  restrooms). 
Everything  from  surveillance  bugs  to  Bluetooth 
devices  could  be  shut  down  at  once  by  turning 
whole  office  buildings  into  dead  zones. 

Yes,  we’d  be  rolling  things  back  to  the  pre¬ 
wireless  days.  But  that  means  we’d  dump  all  the 
problems  wireless  has  brought  us,  from  net¬ 
work  security  holes  to  the  time  employees 
waste  on  nonbusiness  cell  calls.  And  since  most 
of  those  wireless  gizmos  are  personal,  not  is¬ 
sued  by  the  company,  we  wouldn’t  be  losing  of¬ 
ficial  IT  infrastructure  —  just  shedding  annoy¬ 
ing  complications  that  users  have  dragged  in. 

It’s  technology  applied  to  eliminate  problems 
introduced  by  technology.  So  why  shouldn’t  we 
use  jammers? 

Well,  they  are  illegal.  Maybe  the  FCC  isn’t 
actively  looking  for  violators,  but  if  you  blast 
away  with  a  jammer  in  the  same  location  long 
enough,  you’ll  probably  get  caught. 

Then  there  are  the  side  effects. 

Never  mind  users  whining  about 
emergency  calls  they  might  not  get; 
they  got  messages  about  emergen¬ 
cies  before  they  had  cell  phones, 
and  they  can  do  that  now,  too. 

But  delivery  and  repair  people 
depend  heavily  on  wireless  tech¬ 
nologies  these  days.  Your  building 
security  guards  use  radios;  so  do 
police  and  firefighters.  Broad- 
spectrum  jamming  would  cut  them 
all  off.  Jamming  would  likely  affect 
your  neighbors,  too,  because  there’s 


no  cheap  way  to  limit  the  effects  of  a  jamming 
signal  —  it  won’t  stay  inside  your  office  walls. 

Of  course,  you  could  limit  your  jamming  to 
just  Wi-Fi’s  2.4-GHz  band  and  spend  extra  for 
smart  jammers  that  fool  cell  phones  into  think¬ 
ing  they’re  local  towers  that  have  run  out  of 
bandwidth.  Or  you  could  line  your  office  and 
conference  room  walls  with  radioproof  material 
that  lets  you  use  Wi-Fi  and  Bluetooth  locally 
while  blocking  would-be  wireless  hijackers  and 
without  annoying  the  people  next  door  —  and 
that  approach  is  legal,  too. 

Pile  on  enough  antiwireless  technology,  and 
you  might  even  be  able  to  block  just  the  things 
you  want  blocked.  Wouldn’t  that  be  great? 

No,  it  wouldn’t. 

Maybe  movie  theaters  and  churches  can  roll 
back  wireless.  Maybe  cops  and  the  Secret  Ser¬ 
vice  have  to  create  wireless-free  zones.  We 
can’t  —  any  more  than  we  could  roll  back  the 
Internet  or  LANs  or  PCs  when  users  first 
brought  them  in. 

Sure,  wireless  will  give  us  security  headaches 
for  a  long  time.  But  users  have  forced  us  to  deal 
with  cell  phones,  Wi-Fi  and  the  rest.  They’ve 
forced  wireless  on  us  because  it’s 
useful  to  them,  even  if  it’s  an  on¬ 
going  pain  for  us. 

We  can  —  and  should  —  use  vig¬ 
ilance,  education  and  occasional 
arm-twisting  to  plug  security  holes 
and  keep  users  from  straying  too 
far  from  what  we  can  handle. 

But  there’s  no  use  in  wishing  for 
ways  to  jam  or  block  or  limit  wire¬ 
less  technology.  Not  now,  not  any¬ 
more.  Users  are  right  —  for  IT,  in 
many  ways,  the  future  is  wireless. 

And  we  can’t  jam  the  future. 

©  50066 


frank  hayes,  Computer- 
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Rain,  Rain,  Go  Away 

When  hurricane  season  arrives,  this  pilot  fish  in  Flori¬ 
da  isn’t  worried.  The  disaster  recovery  plan  is  in  place. 
Backups  are  done.  The  new  generators  are  fueled. 

And  when  a  storm  hits,  everything  keeps  running  - 
except  that  it’s  pretty  dark  in  the  data  center  and  the  IT 
staff  is  monitoring  the  servers  by  flashlight.  “Did  the 
bulbs  blow  when  the  power  surged  back  on?  Or 
maybe  the  breaker  tripped?”  fish  asks.  “No  -  further 
investigation  revealed  that  no  one  had  bothered  to 
wire  the  lighting  into  the  generator.” 

S°g  Story  pu.nl/ 

It’s  the  early  SHARK 

1980s,  and  j.jjj# 

this  company  is  |  AN  ll^l 
moving  to  a  new 


data  center  -  which  is  a 
major  undertaking  for 
the  one  department  that 
still  keeps  all  its  data  on 
punch  cards  and  refuses 
to  copy  it  to  tape.  “The 
department  head  told  us 
he  planned  to  move  his 
many  filing  cabinets 
worth  of  card  drawers  by 
hiring  a  flatbed  truck,” 
says  an  iT  pilot  fish. 
“Then  the  data  center 
manager  asked  one 
question:  “What  happens 
if  it’s  raining  that  week¬ 
end?’  The  department 
head  got  a  blank  look  on 
his  face  as  his  jaw  start¬ 
ed  its  trip  to  the  floor. 
The  data  was  moved  to 
disk  by  the  end  of  the 
week. 

You  Said  Bring 
Back  All  the 
Computers 

This  big  hospital  is  shut¬ 
ting  down  a  remote 
physical  therapy  office, 
but  the  outpatient  clinic 
at  the  same  site  will  stay 
open.  So  after  this  pilot 
fish  sends  two  newly 
hired  PC  techs  to  collect 
the  therapy  office’s  com¬ 
puters,  he’s  a  little  con¬ 
cerned  when  the  con¬ 
nection  to  the  clinic 
drops  off.  Maybe  it’s  a 


power  outage 
from  this  thun¬ 
derstorm,  he 
figures.  “Hours 
later,  I  begin  to 
cry  when  the  techs  re¬ 
turn  and  start  unloading 
the  equipment:  monitors, 
PCs,  mice,  keyboards  - 
and  then  the  router, 
switch  and  complete 
patch  panel  with  a  spa¬ 
ghetti  of  cut  wires  out 
the  back,”  fish  says. 

“  ’Why  in  @#$%!  did  you 
remove  the  networking 
equipment?’  I  ask.  Then 
I  remember  the  network 
closet  was  located  in  the 
therapy  office.” 

Whatever  Works 

This  Gulf  Coast  facility 
is  big,  but  it’s  a  long 
way  from  the  big  city  - 
or  a  really  big  network 
connection.  So,  what’s 
the  plan  for  protecting 
data  when  a  hurricane 
strikes?  consultant  pilot 
fish  asks  IT  manager. 
Manager  replies,  “Be¬ 
cause  we're  so  far  from 
any  real  bandwidth, 
when  we  see  a  hurricane 
coming,  we  call  every¬ 
body  on  the  campus  and 
tell  them  to  make  a  full 
backup  of  their  data  and 
bring  it  to  the  designated 
trailer.  Once  everyone  is 
accounted  for,  we  put  all 
the  tapes  in  my  pickup 
truck  and  drive  north  for 
a  few  days.” 


O  DRIVE  BY  WITH  YOUR  STORY.  Send  me  your  true 
tale  of  IT  life  at  sharky@computerworld.com.  You 
score  a  snazzy  Shark  shirt  if  I  use  it.  And  check  out  the  daily 
feed,  browse  the  Sharkives  and  sign  up  for  Shark  Tank 
home  delivery  at  computerworld.com/sharky. 


mm 


5,  : 


Enterprise 


It  is  one  of  the  biggest  threats  to  your  enterprise  today.  Spyware 
steals  bandwidth,  halts  productivity  and  puts  your  intellectual 
property  in  harm’s  way.  Webroot  Spy  Sweeper  Enterprise  offers 
real-time  protection  by  identifying  and  eradicating  spyware  across 
your  organization.  To  see  the  magnitude  of  the  spyware  threat,  run 
a  free  network  scan  at  www.webroot.com/wfioaboy  or  contact  us 
at  866.254.5914 


Webroot 

Software:;  Inc. 


Liberated 


Trapped 


DB2  DOESN’T  LOCK  YOU  IN. 
YET  ANOTHER  REASON  WHY 
DB2  IS  THE  WORLD’S  LEADING 
DATABASE  PLATFORM. 


DB2  is  middleware,  but  it  is  anything 
but  middle-of-the-road.  In  fact,  DB2 
is  the  leading  database  built  on  and 
optimized  for  Linux*  UNIX5  and 
Windows;5  built  to  take  full  advantage 
of  your  existing  heterogeneous  and 
open  environments,  which  enable 
true  grid  computing. 

Plus,  there’s  no  constricting  contract. 

It’s  also  middleware  with  an  eye 
on  your  resources.  All  of  them.  An 
ITG  study  showed  overall  costs 
for  Oracle  are  up  to  four  times 


higher  than  DB2.  Solitaire  claims 
that,  on  average,  Oracle  required 
25%  more  time  to  manage  than 
DB2.  And  tpc.org  rates  DB2  as  the 
overall  price/performance  leader 
forTPC-C  on  Linux,  UNIX  and 
Windows.  Ahead  of  both  Oracle 
and  Microsoft5  SQL  Server* 

Then  there’s  this;  Oracle  will 
drop  the  current  level  of  support 
for  Oracle  8i  at  the  end  of  2004. 
Meaning  limited  support,  higher 
cost  or  a  complete  migration  to 
current  versions  of  Oracle. 


Fortunately,  IBM  offers  ongoing, 
around-the-clock  service  and  support 
for  DB2.  And  DB2  is  also  highly 
scalable,  flexible  and  easy  to  manage, 
requiring  no  newfangled  skill  sets. 

Why  not  move  up  to  middleware 
that  makes  sense?  Through  the 
end  of  the  year,  you  can  get 
IBM  DB2  Universal  Database  by 
taking  advantage  of  our  extremely 
compelling  trade-up  promotion. 

Visit  ibm.com/db2/swap  today 
to  find  out  if  you  qualify. 

And  free  yourself. 


DEMAND  BUSINESS 


IBM,  the  IBM  logo,  DB2  and  the  On  Demand  logo  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and  other  countries.  Linux  is  a  registered  trademark  of  Linus  Torvalds.  Microsoft 
and  Windows  are  registered  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  UNIX  is  a  registered  trademark  of  The  Open  Group  in  the  United  States  and/or  other  countries.  Other  company,  product  and 
service  names  may  be  trademarks  or  service  marks  of  others.  ©  2004  IBM  Corporation.  All  rights  reserved.  'All  referenced  results  current  as  of  09/28/04.  Linux:  DB2  UDB  v8.1 : 1.61  US$/tpmC,  18,661  tpmC,  available  12/15/04,  vs  Oracle 
lOg  :  3.94  US$/tpmC,  136,111  tpmC,  available  03/05/04.  UNIX:  DB2  UDB  v8.1:  4.95  US$/tpmC,  809,144  tpmC,  available  09/30/04,  vs  Oracle  lOg  :  5.26  US$./tpmC,  371,044  tpmC,  available  09/30/04,  Windows:  DB2  UDB  v8.1: 1.68  US$/tpmC, 
18,318  tpmC,  available  04/14/04,  vs  Microsoft  SQL  Server  2000: 1.85  US$/tpmC,  22,052  tpmC,  available  02/18/04,  vs  Oracle  lOg  :  4.98  US$/tpmC,  291,413  tpmC,  available  10/25/04.  TPC  Benchmark,  TPC-C  and  tpmC  are  trademarks  of  the 
transaction  Processing  Performance  Council.  For  further  TPC-related  information,  please  visit  http://www.tpc.org. 


